[release-v3.30] Auto pick #10015: Install Calico in OCP with eBPF mode as the default

[lucastigera]

Cherry pick of #10015 on release-v3.30.

#10015: Install Calico in OCP with eBPF mode as the default

Original PR Body below

Description

This PR creates/changes manifests to install Calico with the eBPF dataplane in an OpenShift cluster by default.

Changes on the user docs might look like this:

Install with eBPF mode

• Set the KUBERNETES_SERVICE_HOST attribute in 01-configmap-kubernetes-services-endpoint.yaml file. The values can be accessed using the command below.

grep -E '"BaseDomain"|"ClusterName"' .openshift_install_state.json -B 1 -A 1

The output would look like this:

    "*installconfig.baseDomain": {
        "BaseDomain": "base.domain.com",
        "Publish": ""
--
    "*installconfig.clusterName": {
        "ClusterName": "ocp-cluster-name"
    },

You can set the values in the file using the command below:

CLUSTER_NAME=`grep -o '"ClusterName": "[^"]*' .openshift_install_state.json | sed 's/"ClusterName": "//'` && \
sed -i "s|<cluster_name>|$CLUSTER_NAME|g" manifests/01-configmap-kubernetes-services-endpoint.yaml && \
BASE_DOMAIN=`grep -o '"BaseDomain": "[^"]*' .openshift_install_state.json | sed 's/"BaseDomain": "//'` && \
sed -i "s|<base_domain>|$BASE_DOMAIN|g" manifests/01-configmap-kubernetes-services-endpoint.yaml

• Include spec.template.spec.dnsConfig.nameservers value to resolve the apiserver DNS in 02-tigera-operator.yaml file:
  • For clusters in AWS, the DNS server address is 169.254.169.253.

dnsConfig:
  nameservers:
  - 169.254.169.253

Install with Iptables mode

• Change linuxDataplane to Iptables in manifests/01-cr-installation.yaml file.
• Set deployKubeProxy to true in cluster-network-operator.yaml file.
• Comment out the KUBERNETES_SERVICE_HOST and KUBERNETES_SERVICE_PORT lines in 01-configmap-kubernetes-services-endpoint.yaml file.

sed -i 's/^\(\s*linuxDataplane:\s*\)BPF/\1Iptables/' manifests/01-cr-installation.yaml && \
sed -i 's/^\(\s*deployKubeProxy:\s*\)false/\1true/' manifests/cluster-network-operator.yaml && \
sed -i '/^\s*KUBERNETES_SERVICE_HOST:/s/^\(\s*\)/#\1/' manifests/01-configmap-kubernetes-services-endpoint.yaml && \
sed -i '/^\s*KUBERNETES_SERVICE_PORT:/s/^\(\s*\)/#\1/' manifests/01-configmap-kubernetes-services-endpoint.yaml

Related issues/PRs

Todos

• Tests
• Documentation
• Release note

Release Note

- New manifests to install Calico with the eBPF dataplane in an OpenShift cluster.

Reminder for the reviewer

Make sure that this PR has the correct labels and milestone set.

Every PR needs one docs-* label.

• docs-pr-required: This change requires a change to the documentation that has not been completed yet.
• docs-completed: This change has all necessary documentation completed.
• docs-not-required: This change has no user-facing impact and requires no docs.

Every PR needs one release-note-* label.

• release-note-required: This PR has user-facing changes. Most PRs should have this label.
• release-note-not-required: This PR has no user-facing changes.

Other optional labels:

• cherry-pick-candidate: This PR should be cherry-picked to an earlier release. For bug fixes only.
• needs-operator-pr: This PR is related to install and requires a corresponding change to the operator.