The sdewan operator is developed under kubebuilder framework

Project initialization(mostly, developers should not execute this step)

go mod init sdewan.akraino.org/sdewan
kubebuilder init --domain sdewan.akraino.org

To create new CRD and controller

kubebuilder create api --group batch --version  v1alpha1  --kind  Mwan3Policy

• One CRD one controller
• Controller watches itself CR and the Deployment(ready status only)
• Reconcile calls WrtProvider to add/update/delete rules for CNF
• CnfProvider interfaces defines the function CNF function calls. WrtProvider is one implementation of CnfProvider
• For the users, CNF rules are CRs. But for openwrt, the rules are openwrt rule entities. We can pass the CRs to OpenWRT API. Instead, we need to convert the CRs to OpenWRT entities.
• Finalizer should be added to CR only when AddUpdate call succeed. Likewise, finalizer should be removed from CR only when Delete call succeed.
• As we have many CRDs, so there could be many duplicate code. For example, convertCrd, AddUpdateXX, and even reconcile logic. So we need to extract the similar logic into functions to reduce the duplicatioin.

• CNF image built from HuiFeng's script. I have uploaded the image at integratedcloudnative/openwrt:dev
• The CNF sample deployment yaml file under sample directory (together with configmap and ovn network yaml files)
• A runable framework with Mwan3Policy CRD and controller implemented. It means we can run the controller and add/update/delete mwan3policy rules.

• Add a watch for deployment, so that the controller can get the CNF ready status change. predicate feature should be used to filter no-status event.
• Implemente the remain CRDs/controllers. As all the controller logics are almost the same, some workload will be the extracting of the similar logic and make them functions.
• Add defaulting webhook for Deployment to add interface info to annotations.
• Add validation webhook to validate CR

To Deploy dev env

1. Deploy icn
2. kubectl apply -f sample/*.yaml
3. Once icn deployed the golang should have been installed. But you may need to set env export GOROOT="/usr/lib/go"
4. Install kubebuilder
5. DO NOT git clone this repo for your development, as this is my dev version. Instead you should get code from gerrit

1. clone icn repo
2. cd icn and make the following change of Makefile

jenkins@pod14-node2:/home/stack/cheng/icncheng$ git diff Makefile
diff --git a/Makefile b/Makefile
index d0e5b33..9ac687b 100644
--- a/Makefile
    b/Makefile
@@ -160,9  160,6 @@ verify_nestedk8s: prerequisite \

 bm_verify_nestedk8s: prerequisite \
         kud_bm_deploy_e2e \
-        sdwan_verifier \
-        kud_bm_reset \
-       clean_bm_packages

3. vagrant up
4. login vagrant VM and execute the following commands

sudo su
cd /vagrant
make bm_verify_nestedk8s

The API admission webhook depends on cert-manager so we need to install cert-manager first.

To install the CRD and the controller, we can follow this guide. https://book.kubebuilder.io/cronjob-tutorial/running-webhook.html

We have the image built and published at integratedcloudnative/sdewan-controller:dev. The openwrt docker image we used for test is at integratedcloudnative/openwrt:dev. To use some other images, we need to make configuration in config/default/manager_image_patch.yaml

The simple installation steps:

1. kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v0.11.0/cert-manager.yaml
2. kubectl apply -f sdewan-deploy.yaml

1. update build/set_proxy file with required proxy for docker build
2. execute below commands to generate Sdewan CNF docker image which tagged with 'openwrt-1806-mwan3'

cd build
sudo bash build_image.sh

• https://book.kubebuilder.io/
• https://openwrt.org/