Antonio Ojea 0266d3bcb3 Allow single-to-dual-stack reconfiguration for ServiceCIDR ...

This change modifies the validation logic for ServiceCIDR updates
(`ValidateServiceCIDRUpdate`) to specifically permit upgrading a
single-stack ServiceCIDR (either IPv4 or IPv6) to a dual-stack
configuration.

This reconfiguration path is considered safe because it only involves adding
a new CIDR range without altering the existing primary CIDR. This
ensures that existing Service IP allocations are not disrupted.

Other modifications, such as:
- Downgrading from dual-stack to single-stack
- Reordering CIDRs in a dual-stack configuration
- Changing the primary CIDR during a single-to-dual-stack
  reconfiguration

remain disallowed by the validation. These operations carry a higher
risk of breaking existing Services or cluster networking
configurations. Preventing these updates automatically encourages
administrators to perform such changes manually after carefully
assessing the potential impact on their specific cluster environment.
The validation errors and controller logs provide guidance when such
disallowed changes are attempted.

Change-Id: I41dc09dfddb05f277925da2262f8114d6accbd1d

2025-04-14 17:05:44 +00:00

..

dualstack_endpoints_test.go

kube-controller-manager: readjust log verbosity

2024-02-26 14:51:56 +08:00

dualstack_test.go

Allow single-to-dual-stack reconfiguration for ServiceCIDR

2025-04-14 17:05:44 +00:00

main_test.go

…