NLB display name to OCID map

Map the display name of NLB to an OCID to avoid looking it up again in each
reconciliation.

Author: pbenas

hack/run_e2e_test.sh

@@ -68,8 +68,7 @@ function run_e2e_tests_existing_cluster() {
                     --static-snapshot-compartment-id=${STATIC_SNAPSHOT_COMPARTMENT_ID} \
                     --enable-parallel-run=${ENABLE_PARALLEL_RUN} \
                     --run-uhp-e2e=${RUN_UHP_E2E} \
-                    --add-oke-system-tags="false" \
-                    --maxpodspernode=${MAX_PODS_PER_NODE}
+                    --add-oke-system-tags="false"
     else
         ginkgo -v -progress --trace -nodes=${E2E_NODE_COUNT} "${FOCUS_OPT}" "${FOCUS_SKIP_OPT}" "${FOCUS_FP_OPT}"  \
             ginkgo -v -p -progress --trace "${FOCUS_OPT}" "${FOCUS_FP_OPT}"  \
@@ -92,8 +91,7 @@ function run_e2e_tests_existing_cluster() {
                     --static-snapshot-compartment-id=${STATIC_SNAPSHOT_COMPARTMENT_ID} \
                     --enable-parallel-run=${ENABLE_PARALLEL_RUN} \
                     --run-uhp-e2e=${RUN_UHP_E2E} \
-                    --add-oke-system-tags="false" \
-                    --maxpodspernode=${MAX_PODS_PER_NODE}
+                    --add-oke-system-tags="false"
     fi
     retval=$?
     return $retval

pkg/cloudprovider/providers/oci/ccm.go

@@ -1,4 +1,4 @@
-// Copyright 2017 Oracle and/or its affiliates. All rights reserved.
+// Copyright (C) 2017, 2025, Oracle and/or its affiliates.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -100,7 +100,7 @@ func NewCloudProvider(config *providercfg.Config) (cloudprovider.Interface, erro
 
 	rateLimiter := client.NewRateLimiter(logger.Sugar(), config.RateLimiter)
 
-	c, err := client.New(logger.Sugar(), cp, &rateLimiter, config.Auth.TenancyID)
+	c, err := client.New(logger.Sugar(), cp, &rateLimiter, config)
 	if err != nil {
 		return nil, err
 	}

pkg/oci/client/client.go

@@ -18,6 +18,7 @@ import (
 	"context"
 	"time"
 
+	providercfg "github.com/oracle/oci-cloud-controller-manager/pkg/cloudprovider/providers/oci/config"
 	"github.com/oracle/oci-go-sdk/v65/common"
 	"github.com/oracle/oci-go-sdk/v65/common/auth"
 	"github.com/oracle/oci-go-sdk/v65/core"
@@ -194,7 +195,7 @@ type client struct {
 }
 
 // New constructs an OCI API client.
-func New(logger *zap.SugaredLogger, cp common.ConfigurationProvider, opRateLimiter *RateLimiter, targetTenancyID string) (Interface, error) {
+func New(logger *zap.SugaredLogger, cp common.ConfigurationProvider, opRateLimiter *RateLimiter, cloudProviderConfig *providercfg.Config) (Interface, error) {
 
 	compute, err := core.NewComputeClientWithConfigurationProvider(cp)
 	if err != nil {
@@ -283,23 +284,15 @@ func New(logger *zap.SugaredLogger, cp common.ConfigurationProvider, opRateLimit
 		RetryPolicy: newRetryPolicy(),
 	}
 
-	loadbalancer := loadbalancerClientStruct{
-		loadbalancer:    lb,
-		requestMetadata: requestMetadata,
-		rateLimiter:     *opRateLimiter,
-	}
-	networkloadbalancer := networkLoadbalancer{
-		networkloadbalancer: nlb,
-		requestMetadata:     requestMetadata,
-		rateLimiter:         *opRateLimiter,
-	}
+	loadbalancer := NewLBClient(lb, requestMetadata, opRateLimiter)
+	networkloadbalancer := NewNLBClient(nlb, requestMetadata, opRateLimiter)
 
 	c := &client{
 		compute:             &compute,
 		network:             &network,
 		identity:            &identity,
-		loadbalancer:        &loadbalancer,
-		networkloadbalancer: &networkloadbalancer,
+		loadbalancer:        loadbalancer,
+		networkloadbalancer: networkloadbalancer,
 		bs:                  &bs,
 		filestorage:         &fss,
 		//compartment:     	 &compartment,

pkg/oci/client/client_factory.go

@@ -1,4 +1,4 @@
-// Copyright 2019 Oracle and/or its affiliates. All rights reserved.
+// Copyright (C) 2019, 2025, Oracle and/or its affiliates.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -29,6 +29,6 @@ func GetClient(logger *zap.SugaredLogger, cfg *config.Config) (Interface, error)
 
 	rateLimiter := NewRateLimiter(logger, cfg.RateLimiter)
 
-	c, err := New(logger, cp, &rateLimiter, cfg.Auth.TenancyID)
+	c, err := New(logger, cp, &rateLimiter, cfg)
 	return c, err
 }

pkg/oci/client/load_balancer.go

@@ -1,4 +1,4 @@
-// Copyright 2018 Oracle and/or its affiliates. All rights reserved.
+// Copyright (C) 2018, 2025, Oracle and/or its affiliates.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -17,6 +17,7 @@ package client
 import (
 	"context"
 	"go.uber.org/zap"
+	"sync"
 	"time"
 
 	"k8s.io/apimachinery/pkg/util/wait"
@@ -33,6 +34,7 @@ const (
 )
 
 type loadbalancerClientStruct struct {
+	nameToOcid      sync.Map
 	loadbalancer    loadBalancerClient
 	requestMetadata common.RequestMetadata
 	rateLimiter     RateLimiter
@@ -64,6 +66,15 @@ type GenericLoadBalancerInterface interface {
 	UpdateLoadBalancer(ctx context.Context, lbID string, details *GenericUpdateLoadBalancerDetails) (string, error)
 }
 
+func NewLBClient(lb loadBalancerClient, rm common.RequestMetadata, lim *RateLimiter) *loadbalancerClientStruct {
+	l := loadbalancerClientStruct{
+		loadbalancer:    lb,
+		requestMetadata: rm,
+		rateLimiter:     *lim,
+	}
+	return &l
+}
+
 func (c *loadbalancerClientStruct) GetLoadBalancer(ctx context.Context, id string) (*GenericLoadBalancer, error) {
 	if !c.rateLimiter.Reader.TryAccept() {
 		return nil, RateLimitError(false, "GetLoadBalancer")
@@ -83,6 +94,29 @@ func (c *loadbalancerClientStruct) GetLoadBalancer(ctx context.Context, id strin
 }
 
 func (c *loadbalancerClientStruct) GetLoadBalancerByName(ctx context.Context, compartmentID, name string) (*GenericLoadBalancer, error) {
+	logger := zap.L().Sugar() // TODO refactor after pull-requests/1389
+	logger = logger.With("lbName", name,
+		"compartment-id", compartmentID,
+		"loadBalancerType", "lb",
+	)
+
+	if ocid, ok := c.nameToOcid.Load(name); ok {
+		var err error
+		ocidStr, ok := ocid.(string)
+		if ok {
+			lb, err := c.GetLoadBalancer(ctx, ocidStr)
+			if err == nil && *lb.DisplayName == name {
+				return lb, err
+			}
+		}
+
+		if !ok || IsNotFound(err) { // Only remove the cached value on 404, not on a 5XX
+			c.nameToOcid.Delete(name)
+		}
+	} else {
+		logger.Info("LB name to OCID cache miss")
+	}
+
 	var page *string
 	for {
 		if !c.rateLimiter.Reader.TryAccept() {
@@ -101,6 +135,7 @@ func (c *loadbalancerClientStruct) GetLoadBalancerByName(ctx context.Context, co
 		}
 		for _, lb := range resp.Items {
 			if *lb.DisplayName == name {
+				c.nameToOcid.Store(name, *lb.Id)
 				return c.loadbalancerToGenericLoadbalancer(&lb), nil
 			}
 		}

pkg/oci/client/network_load_balancer.go

@@ -1,4 +1,4 @@
-// Copyright 2018 Oracle and/or its affiliates. All rights reserved.
+// Copyright (C) 2018, 2025, Oracle and/or its affiliates.
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -16,6 +16,7 @@ package client
 
 import (
 	"context"
+	"sync"
 
 	"go.uber.org/zap"
 	"k8s.io/apimachinery/pkg/util/wait"
@@ -26,15 +27,30 @@ import (
 )
 
 type networkLoadbalancer struct {
+	nameToOcid          sync.Map
 	networkloadbalancer networkLoadBalancerClient
 	requestMetadata     common.RequestMetadata
 	rateLimiter         RateLimiter
 }
 
 const (
 	NetworkLoadBalancerEntityType = "NetworkLoadBalancer"
+	// TODO move to utils?
+	dns1123LabelFmt = "[a-z0-9]([-a-z0-9]*[a-z0-9])?"
+	uuidFmt         = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"
+	// <ns>/<svc>/<svc UID>
+	LBNameRegex = "^" + dns1123LabelFmt + "/" + dns1123LabelFmt + "/" + uuidFmt + "$"
 )
 
+func NewNLBClient(nlb networkLoadBalancerClient, rm common.RequestMetadata, lim *RateLimiter) *networkLoadbalancer {
+	n := networkLoadbalancer{
+		networkloadbalancer: nlb,
+		requestMetadata:     rm,
+		rateLimiter:         *lim,
+	}
+	return &n
+}
+
 func (c *networkLoadbalancer) GetLoadBalancer(ctx context.Context, id string) (*GenericLoadBalancer, error) {
 	if !c.rateLimiter.Reader.TryAccept() {
 		return nil, RateLimitError(false, "GetLoadBalancer")
@@ -54,6 +70,29 @@ func (c *networkLoadbalancer) GetLoadBalancer(ctx context.Context, id string) (*
 }
 
 func (c *networkLoadbalancer) GetLoadBalancerByName(ctx context.Context, compartmentID string, name string) (*GenericLoadBalancer, error) {
+	logger := zap.L().Sugar() // TODO refactor after pull-requests/1389
+	logger = logger.With("lbName", name,
+		"compartment-id", compartmentID,
+		"loadBalancerType", "nlb",
+	)
+
+	if ocid, ok := c.nameToOcid.Load(name); ok {
+		var err error
+		ocidStr, ok := ocid.(string)
+		if ok {
+			lb, err := c.GetLoadBalancer(ctx, ocidStr)
+			if err == nil && *lb.DisplayName == name {
+				return lb, err
+			}
+		}
+
+		if !ok || IsNotFound(err) { // Only remove the cached value on 404, not on a 5XX
+			c.nameToOcid.Delete(name)
+		}
+	} else {
+		logger.Info("NLB name to OCID cache miss")
+	}
+
 	var page *string
 	for {
 		if !c.rateLimiter.Reader.TryAccept() {
@@ -72,6 +111,7 @@ func (c *networkLoadbalancer) GetLoadBalancerByName(ctx context.Context, compart
 		}
 		for _, lb := range resp.Items {
 			if *lb.DisplayName == name {
+				c.nameToOcid.Store(name, *lb.Id)
 				return c.networkLoadbalancerSummaryToGenericLoadbalancer(&lb), nil
 			}
 		}