OCPBUGS-3176: Add config knob for enabling ip forwarding

openapi/openapi.json

@@ -24420,6 +24420,10 @@
       "description": "GatewayConfig holds node gateway-related parsed config file parameters and command-line overrides",
       "type": "object",
       "properties": {
+        "enableIPForwarding": {
+          "description": "EnableIPForwarding enables IP forwarding for all traffic on OVN-Kubernetes managed interfaces (such as br-ex). By default this is disabled, and Kubernetes related traffic is still forwarded appropriately. This setting is only useful if there is a desire to for the node to act as a router and forward traffic between interfaces on the host.",
+          "type": "boolean"
+        },
         "routingViaHost": {
           "description": "RoutingViaHost allows pod egress traffic to exit via the ovn-k8s-mp0 management port into the host before sending it out. If this is not set, traffic will always egress directly from OVN to outside without touching the host stack. Setting this to true means hardware offload will not be supported. Default is false if GatewayConfig is specified.",
           "type": "boolean"

operator/v1/0000_70_cluster-network-operator_01.crd.yaml

@@ -216,6 +216,10 @@ spec:
                           description: gatewayConfig holds the configuration for node gateway options.
                           type: object
                           properties:
+                            enableIPForwarding:
+                              description: EnableIPForwarding enables IP forwarding for all traffic on OVN-Kubernetes managed interfaces (such as br-ex). By default this is disabled, and Kubernetes related traffic is still forwarded appropriately. This setting is only useful if there is a desire to for the node to act as a router and forward traffic between interfaces on the host.
+                              type: boolean
+                              default: false
                             routingViaHost:
                               description: RoutingViaHost allows pod egress traffic to exit via the ovn-k8s-mp0 management port into the host before sending it out. If this is not set, traffic will always egress directly from OVN to outside without touching the host stack. Setting this to true means hardware offload will not be supported. Default is false if GatewayConfig is specified.
                               type: boolean

operator/v1/types_network.go

@@ -489,6 +489,13 @@ type GatewayConfig struct {
 	// +kubebuilder:default:=false
 	// +optional
 	RoutingViaHost bool `json:"routingViaHost,omitempty"`
+	// EnableIPForwarding enables IP forwarding for all traffic on OVN-Kubernetes managed interfaces (such as br-ex).
+	// By default this is disabled, and Kubernetes related traffic is still forwarded appropriately. This setting
+	// is only useful if there is a desire to for the node to act as a router and forward traffic between interfaces
+	// on the host.
+	// +kubebuilder:default:=false
+	// +optional
+	EnableIPForwarding bool `json:"enableIPForwarding,omitempty"`
 }
 
 type ExportNetworkFlows struct {