How to Rollout an Update for a CNI Without Breaking the World Wide Web
Talkat OpenFeature Summit NA 2024 · on Tuesday, 2024-11-12· at 09:10· Salt Palace | Level 2 | 250 D·
summary
Project Calico uses feature flags to switch actual data planes (eBPF, iptables/ipvs, Windows HNS, VPP, nftables) and to enable BGP via BGP via bird; a missed Kubernetes 1.24 change that removed the master node label prevents bird from starting and takes Reddit offline for hours, showing flags alone don’t prevent outages. Response is to add a pluggable data plane workflow, introduce an API server and operator, codify configurations and docs, and keep experimental features behind explicit flags.
AI-written summary · about
chapters (5)
- 0:00Project Calico introduction
- 3:55Feature flags explained
- 9:13Reddit CNI outage
- 12:45Lessons learned
- 13:47Summary
related talks
32mUsing Open-Source Software to Secure Cloud-Native Applications
07mKeep Calm and Deploy On: Creating Safer Releases with Feature Flags
40mNoverlay Networks for Health and Wellbeing
22mHave you lost your node...again?
35mBuilding a Kubernetes on Bare-Metal Cluster
29mSimplifying the Networking and Secur...
41mKubernetes the Very Hard Way
20mHow We Progressively Deliver Changes To Kubernetes Using Canary Deployments and Featur...