Skip to content

Conversation

@rakeshgm
Copy link
Member

@rakeshgm rakeshgm commented Jan 8, 2026

This PR adds StorageAccessDetails to DRClusterConfig status to update
storage provisioner CIDRs extracted from CSIAddonsNode resources.

Changes

  • API Changes: Add StorageAccessDetail type to DRClusterConfigStatus

    • StorageProvisioner: name of the storage provisioner
    • CIDRs: list of CIDR blocks requiring network access
  • Controller Implementation: Populate StorageAccessDetails from CSIAddonsNodes

    • Extract NetworkFenceClientStatus entries matching supported NetworkFenceClasses
    • Group CIDRs by storage provisioner from NetworkFenceClass spec
    • Update DRClusterConfig status with collected StorageAccessDetails
  • RBAC Updates: Add permissions for CSIAddonsNode resources

  • Metrics: create a new metrics which sets to true when there is a mismatch detected
    when users update incorrect CIDRs on DRCluster.

  • Alert raise an alert on the hub cluster based on the metric value

Testing

  • Added CSIAddonsNode CRD to test environment
  • Updated controller tests to verify StorageAccessDetails updation
  • Verified CIDR extraction from CSIAddonsNodes and NetworkFenceClasses

@rakeshgm rakeshgm force-pushed the cidr-alerts branch 5 times, most recently from cc3c314 to afd743d Compare January 8, 2026 17:38
Add StorageAccessDetail type to DRClusterConfigStatus to store storage
provisioner information along with associated CIDR blocks.

The StorageAccessDetail struct contains:
- StorageProvisioner: name of the storage provisioner
- CIDRS: list of CIDR blocks that need network access

Signed-off-by: rakeshgm <rakeshgm@redhat.com>
Add controller logic to populate StorageAccessDetails in DRClusterConfig
status by extracting CIDRs from CSIAddonsNode resources.
The implementation:
 - Lists NetworkFenceClientStatus entries from CSIAddonsNodes that match
   supported NetworkFenceClasses
 - Groups CIDRs by storage provisioner from NetworkFenceClass spec
 - Updates DRClusterConfig status with the collected StorageAccessDetails

Also adds CSIAddonsNode CRD to test environment and updates tests.

Signed-off-by: rakeshgm <rakeshgm@redhat.com>
Grant get and list permissions on CSIAddonsNode resources to the
DRClusterConfig controller so it can read NetworkFenceClientStatus
information needed to populate StorageAccessDetails.

Signed-off-by: rakeshgm <rakeshgm@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant