add blog for feature LoadBalancerIPMode #43904

RyanAoh · 2023-11-13T11:52:54Z

Blog for new feature LoadBalancerIPMode.

PR link: kubernetes/kubernetes#119937
KEP issue: kubernetes/enhancements#1860

netlify · 2023-11-13T11:52:59Z

👷 Deploy Preview for kubernetes-io-vnext-staging processing.

Name	Link
🔨 Latest commit	`a2326a4`
🔍 Latest deploy log	https://app.netlify.com/sites/kubernetes-io-vnext-staging/deploys/65705d3e1efceb000816b31e

dipesh-rawat · 2023-11-13T13:15:58Z

/sig network

sftim · 2023-11-13T15:58:16Z

Hi.

I'm afraid this PR should target main, not dev-1.29. Even if the announcement is related to Kubernetes v1.29

/hold

RyanAoh · 2023-11-15T13:29:58Z

PTAL @sftim I've changed the target branch to main.

krol3 · 2023-11-22T14:53:38Z

Hi @RyanAoh , here Communication Team 1.29, the deadline to the feature blog be ready to review was this Friday, Nov 17th, the proposal publish date will be Dec 18th. cc: @a-mccarthy @kcmartin @James-Quigley

@kubernetes/sig-docs-blog-owners: Blog scheduled: Dec 18th, Publication Order Nro:6

sftim · 2023-11-22T15:41:00Z

content/en/blog/_posts/2023-11-13-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

OK to unhold once the date (check the path and the front matter) matches the assigned date, 2023-12-18.

The date both in the file path and front matter have been updated to 2023-12-18.

content/en/blog/_posts/2023-11-13-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

sftim

Some feedback.

content/en/blog/_posts/2023-12-18-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

sftim · 2023-11-23T15:33:52Z

content/en/blog/_posts/2023-12-18-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

+transmitting packets to the node. In the ipvs mode of kube-proxy, 
+there is a problem that health checks from the load balancer never return as the IP is bound to an interface.


Suggested change

transmitting packets to the node. In the ipvs mode of kube-proxy,

there is a problem that health checks from the load balancer never return as the IP is bound to an interface.

transmitting packets to the node. In the ipvs mode of kube-proxy,

there is a problem that health checks from the load balancer never return (the health checks fail

as the associated listening socket is bound to an interface that the load balancer cannot reach).

The load balancer can reach the listening socket but the reply packets can not out the node. I chane the description here. PTAL.

content/en/blog/_posts/2023-12-18-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

sftim · 2023-11-23T15:36:10Z

content/en/blog/_posts/2023-12-18-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

+This blog introduces `LoadBalancerIPMode`, a new alpha feature in Kubernetes 1.29. 
+It provides a configurable approach to define how service implementations, 
+exemplified in this blog by kube-proxy, 
+handle traffic from pods to the `service.status.loadbalancer.ingress.ip` within the cluster.


Suggested change

This blog introduces `LoadBalancerIPMode`, a new alpha feature in Kubernetes 1.29.

It provides a configurable approach to define how service implementations,

exemplified in this blog by kube-proxy,

handle traffic from pods to the `service.status.loadbalancer.ingress.ip` within the cluster.

This blog introduces a new alpha feature in Kubernetes 1.29.

It provides a configurable approach to define how Service implementations,

exemplified in this blog by kube-proxy,

handle traffic from pods to the Service, within the cluster.

content/en/blog/_posts/2023-12-18-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

sftim · 2023-11-23T15:42:23Z

content/en/blog/_posts/2023-12-18-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

+Given that `EnsureLoadBalancer` returns a `LoadBalancerStatus`, 
+the `ipMode` field can be set by the cloud-controller-manager before returning the status. 
+It is more appropriate to delegate this decision to cloud providers through the cloud-controller-manager 
+rather than relying on end users, who may not be familiar with these technical details.


I'd skip this:

Suggested change

Given that `EnsureLoadBalancer` returns a `LoadBalancerStatus`,

the `ipMode` field can be set by the cloud-controller-manager before returning the status.

It is more appropriate to delegate this decision to cloud providers through the cloud-controller-manager

rather than relying on end users, who may not be familiar with these technical details.

sftim

Thanks for proposing this article.

This PR has missed the deadline for PRs to be ready for review; you should promptly address the pending feedback. This article is at risk of being omitted from post-release comms.

RyanAoh · 2023-12-05T02:16:36Z

@sftim Sorry for not responding promptly. I have made a new commit incorporating your feedback. PTAL, thanks.

sftim

Thanks. Here's some feedback.

The big change to make is to write this article as if Kubernetes v1.29 has been released; we won't publish the article until the release has happened.

content/en/blog/_posts/2023-12-18-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

sftim · 2023-12-05T17:32:16Z

content/en/blog/_posts/2023-12-18-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

+The default value is "VIP", meaning that traffic delivered to the node 
+with the destination set to the load balancer's IP and port will be redirected to the backend service by kube-proxy.
+This preserves the existing behavior of kube-proxy. 
+The "Proxy" value is intended to prevent kube-proxy from binding the Load Balancer IP to the node in both ipvs and iptables modes. 


Suggested change

The "Proxy" value is intended to prevent kube-proxy from binding the Load Balancer IP to the node in both ipvs and iptables modes.

The "Proxy" value is intended to prevent kube-proxy from binding the load balancer's IP address to the node

any mode (iptables, ipvs, nftables).

?

What about Windows behavior? There's another operating mode for kube-proxy and the article as written makes it sound like there isn't.

Oops, the mode for Windows was completely overlooked. Upon checking the code, I found that it hasn't been implemented for Windows at all. This is a mistake. As the code for v1.29.0 has already been frozen. I will patch this after its release.

Windows doesn't have nftables, but there is a kube-proxy mode for Windows: kernelspace

Is there a k/k issue tracked?

I created a new one(kubernetes/kubernetes#122202).

content/en/blog/_posts/2023-12-18-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md

Superseded

sftim · 2023-12-06T12:51:58Z

/lgtm
/approve

We can publish this article as it stands.

k8s-ci-robot · 2023-12-06T12:52:07Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: sftim

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~content/en/blog/OWNERS~~ [sftim]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

k8s-ci-robot · 2023-12-06T12:52:08Z

LGTM label has been added.

Git tree hash: afa66e8f70367f93702e35f607382128bc43c36a

sftim · 2023-12-13T18:51:48Z

/hold cancel

k8s-ci-robot added this to the 1.29 milestone Nov 13, 2023

k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Nov 13, 2023

k8s-ci-robot requested review from nate-double-u and sftim November 13, 2023 11:53

k8s-ci-robot added area/blog Issues or PRs related to the Kubernetes Blog subproject language/en Issues or PRs related to English language sig/docs Categorizes an issue or PR as relevant to SIG Docs. size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Nov 13, 2023

RyanAoh force-pushed the dev-1.29 branch 2 times, most recently from c06030f to ba7ce92 Compare November 13, 2023 12:01

k8s-ci-robot added the sig/network Categorizes an issue or PR as relevant to SIG Network. label Nov 13, 2023

k8s-ci-robot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Nov 13, 2023

RyanAoh changed the base branch from dev-1.29 to main November 13, 2023 23:17

k8s-ci-robot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. and removed size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels Nov 13, 2023

RyanAoh changed the base branch from main to dev-1.29 November 13, 2023 23:17

k8s-ci-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. labels Nov 13, 2023

RyanAoh force-pushed the dev-1.29 branch from ba7ce92 to 9d886b5 Compare November 13, 2023 23:23

RyanAoh force-pushed the dev-1.29 branch 2 times, most recently from 7574d18 to 24d0461 Compare November 15, 2023 13:39

sftim reviewed Nov 22, 2023

View reviewed changes

content/en/blog/_posts/2023-11-13-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md Outdated Show resolved Hide resolved

sftim reviewed Nov 22, 2023

View reviewed changes

content/en/blog/_posts/2023-11-13-kubernetes-1-29-feature-loadbalancer-ip-mode-alpha.md Outdated Show resolved Hide resolved

RyanAoh force-pushed the dev-1.29 branch 2 times, most recently from 7a698c8 to a061e7f Compare November 23, 2023 13:45

RyanAoh requested a review from sftim November 23, 2023 14:04

sftim reviewed Nov 28, 2023

View reviewed changes

sftim previously requested changes Dec 4, 2023

View reviewed changes

RyanAoh force-pushed the dev-1.29 branch from a061e7f to 5ea932c Compare December 5, 2023 01:55

RyanAoh requested a review from sftim December 5, 2023 02:12

RyanAoh force-pushed the dev-1.29 branch 2 times, most recently from c0b3bbb to 7226012 Compare December 5, 2023 02:22

sftim reviewed Dec 5, 2023

View reviewed changes

add blog for feature LoadBalancerIPMode

a2326a4

RyanAoh force-pushed the dev-1.29 branch from 7226012 to a2326a4 Compare December 6, 2023 11:38

k8s-ci-robot assigned sftim Dec 6, 2023

k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Dec 6, 2023

k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Dec 6, 2023

k8s-ci-robot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Dec 13, 2023

k8s-ci-robot merged commit cd76d21 into kubernetes:main Dec 13, 2023
6 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

add blog for feature LoadBalancerIPMode #43904

add blog for feature LoadBalancerIPMode #43904

RyanAoh commented Nov 13, 2023

netlify bot commented Nov 13, 2023 •

edited

dipesh-rawat commented Nov 13, 2023

sftim commented Nov 13, 2023

RyanAoh commented Nov 15, 2023

krol3 commented Nov 22, 2023 •

edited

sftim Nov 22, 2023

RyanAoh Nov 23, 2023

sftim left a comment

sftim Nov 23, 2023

RyanAoh Dec 5, 2023

sftim Nov 23, 2023

sftim Nov 23, 2023

sftim left a comment

RyanAoh commented Dec 5, 2023

sftim left a comment

sftim Dec 5, 2023

RyanAoh Dec 6, 2023 •

edited

sftim Dec 6, 2023

sftim Dec 6, 2023

RyanAoh Dec 6, 2023 •

edited

sftim commented Dec 6, 2023

k8s-ci-robot commented Dec 6, 2023

k8s-ci-robot commented Dec 6, 2023

sftim commented Dec 13, 2023

		transmitting packets to the node. In the ipvs mode of kube-proxy,
		there is a problem that health checks from the load balancer never return as the IP is bound to an interface.

	The "Proxy" value is intended to prevent kube-proxy from binding the Load Balancer IP to the node in both ipvs and iptables modes.
	The "Proxy" value is intended to prevent kube-proxy from binding the load balancer's IP address to the node
	any mode (iptables, ipvs, nftables).

add blog for feature LoadBalancerIPMode #43904

add blog for feature LoadBalancerIPMode #43904

Conversation

RyanAoh commented Nov 13, 2023

netlify bot commented Nov 13, 2023 • edited

👷 Deploy Preview for kubernetes-io-vnext-staging processing.

dipesh-rawat commented Nov 13, 2023

sftim commented Nov 13, 2023

RyanAoh commented Nov 15, 2023

krol3 commented Nov 22, 2023 • edited

Choose a reason for hiding this comment

Choose a reason for hiding this comment

sftim left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

sftim left a comment

Choose a reason for hiding this comment

RyanAoh commented Dec 5, 2023

sftim left a comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

RyanAoh Dec 6, 2023 • edited

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

RyanAoh Dec 6, 2023 • edited

Choose a reason for hiding this comment

sftim commented Dec 6, 2023

k8s-ci-robot commented Dec 6, 2023

k8s-ci-robot commented Dec 6, 2023

sftim commented Dec 13, 2023

netlify bot commented Nov 13, 2023 •

edited

krol3 commented Nov 22, 2023 •

edited

RyanAoh Dec 6, 2023 •

edited

RyanAoh Dec 6, 2023 •

edited