Walkthrough

Updates kube-ovn to v1.14.11 across chart, values, and Dockerfile. Tightens CRD OpenAPI schemas with explicit integer min/max bounds. Adds OVN_IPSEC_KEY_DIR configuration and remaps the IPsec keys hostPath in the DaemonSet when IPsec is enabled.

Changes

Sequence Diagram(s)

sequenceDiagram
  autonumber
  participant Helm as Helm Chart
  participant K8s as Kubernetes API Server
  participant DS as ovncni DaemonSet
  participant Node as Node Filesystem

  Helm->>K8s: install/upgrade kube-ovn (Chart.yaml, values.yaml)
  Note over K8s: Apply CRDs with tightened numeric min/max validation
  K8s-->>Helm: CRDs accepted/rejected per schema bounds

  Helm->>K8s: apply DaemonSet (ovncni-ds.yaml)
  alt ENABLE_OVN_IPSEC = true
    K8s->>DS: create/update Pods with IPsec key volume
    DS->>Node: mount hostPath from OVN_IPSEC_KEY_DIR
  else ENABLE_OVN_IPSEC = false
    K8s->>DS: create/update Pods without IPsec key mount
  end

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Possibly related PRs

• Update Kube-OVN to v1.13.10 #847 — Similar kube-ovn packaging updates: chart/values/dockerfile and ovncni-ds path adjustments.
• Update kube-ovn to latest version #922 — Related version bump and Helm chart changes for kube-ovn.

Suggested labels

ok-to-test

Suggested reviewers

• lllamnyp
• klinch0

Poem

I thump my paws—new charts align,
Bounds set neat, like rows in line.
Keys hop burrow to a safer lair,
v1.14.11 scents the air.
Helm bells ring—deploys take flight. 🐇✨

Pre-merge checks and finishing touches

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Summary of Changes

Hello @kvaps, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request focuses on upgrading the Kube-OVN component to its v1.14.11 release. The update primarily involves synchronizing version numbers across various configuration files and Dockerfile, alongside significant refinements to the Custom Resource Definition (CRD) schemas for improved validation. Additionally, it introduces a new configuration option for specifying the storage path of OVN IPsec keys, providing greater control over the deployment environment.

Highlights

• Kube-OVN Version Update: The Kube-OVN component has been updated from version v1.14.5 to v1.14.11 across its Helm chart, application version, and Dockerfile build arguments.
• CRD Schema Refinements: The Custom Resource Definition (CRD) schema for Kube-OVN has been refined by removing deprecated format fields (e.g., int32, int64) and adding explicit minimum and maximum constraints to various integer fields, improving validation and API compatibility.
• Configurable IPsec Key Path: A new configurable variable, OVN_IPSEC_KEY_DIR, has been introduced in values.yaml to specify the host path for OVN IPsec keys, enhancing deployment flexibility.