Advertise KubeVirt VM host routes per node

[aswinsuryan]

A shared CUDN prefix can be advertised by multiple BGP workers even though an L2 UDN VM is hosted by only one node. AWS may send return traffic to a different worker from the one used by the VM's outgoing traffic.

The return worker's ENI has no connection-tracking state for the VM-initiated flow, so its security group can reject the reply unless the VM's ephemeral destination port is explicitly allowed inbound.

Track running VMIs and advertise each guest address as a node-pinned /32 or /128 route from its hosting worker. Reconcile routes during VM start, stop, and migration, and exclude these configurations from OVN RouteAdvertisements.

[openshift-merge-bot]

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Advanced

Run ID: 52941007-98c5-40a5-a86c-03b459ca7744

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: aswinsuryan

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [aswinsuryan]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@aswinsuryan: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.