Plug-in requirements

The plug-in must conform to the CNI specification version 0.3.1 or later.

You must manage the CNI plug-in through an Operator that meets the Operator certification requirements described in this document. To manage the updates to the CNI plug-in, the Operator must have the Seamless Upgrades capability and reflect this in the CSV.

OpenShift interoperability requirements

In addition to the default requirements for functional verification, the OpenShift cluster that you use to verify the CNI functionality must have the Multus CNI plug-in enabled during all tests. All the components that are installed on the host must be tested and supported on the versions of Red Hat Enterprise Linux and Red Hat Enterprise Linux CoreOS.

The CNI plug-in must support OpenShift Virtualization. Any unsupported or degraded features of the plug-in or OpenShift Virtualization when used in combination must be indicated in your product documentation.

As part of the CNI certification badge, the CNI plug-in can be verified for compatibility with Red Hat OpenShift Service Mesh.

CNI lifecycle management requirements

The plug-in must ensure minimal impact on upgrades for either major or minor plug-in releases. The plug-in upgrades should not require a full node reboot (whether major or minor) and must preserve existing connections during cluster upgrades.

The plug-in must allow new connections during upgrades. If new or existing connection preservation is not possible, this must be documented along with detailed upgrade steps, for example, if a full cluster drain or node cordoning/drain is required.

The plug-in documentation must show any difference in upgrade procedure between minor releases, bug fixes, or major updates.

Certifications are specific to the OpenShift minor release tested. Partners are required to recertify their product on new minor OpenShift releases.

CNI test compliance

The plug-in must pass the network tests of the OpenShift End-to-End Tests, based on the Kubernetes End-to-End Tests. These tests exercise the basic functions of the plug-in and show conformance to Kubernetes networking expectations.

It is mandatory to complete the corresponding virtualization tests to validate the interoperability between the CNI plug-in and Red Hat OpenShift Virtualization.

If you want to check the interoperability between the CNI plug-in and Red Hat OpenShift Service Mesh, complete the corresponding service mesh tests as part of the certification. Running the service mesh tests is optional.