Skip to content

docs(networking): document reserved IP addresses - #811

Open
Timofei Larkin (lllamnyp) wants to merge 1 commit into
mainfrom
docs/reserved-ip-addresses
Open

Timofei Larkin (lllamnyp) wants to merge 1 commit into
mainfrom
docs/reserved-ip-addresses

Conversation

@lllamnyp

Copy link
Copy Markdown
Member

What

Adds networking/reserved-ip-addresses.md to the next docs, an operator page for the two optional packages that cozystack/cozystack#3382 adds: cozystack.address-controller (IPAddressClass / IPAddress / IPAddressClaim) and its MetalLB driver cozystack.metallb-iad.

It covers:

  • Enabling both packages through bundles.enabledPackages, and the variants where the platform does not emit the driver because MetalLB is absent.
  • Creating a class that names an existing autoAssign: false IPAddressPool in cozy-metallb, with the admin owning the pool and its advertisement. Also default and auto-claim classes, reclaimPolicy and releaseDelay, and reserving part of a pool that auto-assigns today.
  • Tenant usage: the claim, reading its address, attaching it with local.sdn.cozystack.io/ip-address-claim on a guest Service of a tenant Kubernetes cluster, and opt-in auto-claim with local.sdn.cozystack.io/ip-address-class.
  • The admission policy: what it reserves, its tenant-namespace scope, who is exempt, what it denies that worked before, and a [Warn, Audit] rollout through Package values.
  • Air-gapped installs: the two images are not mirrored by the release tooling. The page lists their exact references and how to override them.
  • Teardown order and CRD upgrades.

Step-by-step procedures, such as adopting an address a Service already holds and clearing finalizers by hand, link to the upstream operating guide rather than repeating it.

Notes for review

The image references and the admission policy's exemptions describe the packages as #3382 currently ships them, so a later change to either there needs the same change here. The page is in next/ and reaches a released version only when the trunk is promoted. The component cards for the two packages are a separate PR, #810.

cozystack/cozystack#3382 adds two optional system packages,
cozystack.address-controller and cozystack.metallb-iad, that let a tenant
reserve an IP address which outlives the Service using it. Operators need
more than the API: the driver only names an existing MetalLB pool, the
packages enable an admission policy that changes what tenant clusters can
set on their Services, the images are outside the repositories the release
tooling mirrors, and finalizers make teardown order matter.

The page covers enabling the packages, creating a class over an existing
pool, how tenants reserve and attach an address, the admission policy and
its rollout mode, air-gapped installs, teardown and CRD upgrades. It links
the upstream operating guide for the step-by-step procedures rather than
copying them.

Assisted-by: LLM
Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>
@netlify

netlify Bot commented Nov 13, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for cozystack ready!

Name Link
🔨 Latest commit b9d9683
🔍 Latest deploy log https://app.netlify.com/projects/cozystack/deploys/6af72bb7506735ba59442e53
😎 Deploy Preview https://deploy-preview-811--cozystack.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@coderabbitai

coderabbitai Bot commented Nov 13, 2026

Copy link
Copy Markdown
Contributor

Important

  • Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: d688db58-8e59-4e6a-b556-ce288f07734c
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant