antctl support traceflow

Fixed antrea-io#923
antctl traceflow is on remote mode, inside controller mode and inside agent mode.
It supports yaml and json output. It can return without retrieving results.

e.g.
```
$ antctl traceflow -S busybox0 -D busybox1
name: default-busybox0-to-default-busybox1
phase: Succeeded
source: default/busybox0
destination: default/busybox1
noderesults:
- node: antrea-linux-testbed7-2
  role: ""
  timestamp: 1595391265
  observations:
  - component: SpoofGuard
    componentinfo: ""
    action: Forwarded
    pod: ""
    dstmac: ""
    networkpolicy: ""
    ttl: 0
    translatedsrcip: ""
    translateddstip: ""
    tunneldstip: ""
  - component: Forwarding
    componentinfo: Output
    action: Delivered
    pod: ""
    dstmac: ""
    networkpolicy: ""
    ttl: 0
    translatedsrcip: ""
    translateddstip: ""
    tunneldstip: ""
```

build/yamls/antrea-eks.yml

@@ -488,6 +488,8 @@ rules:
   - list
   - update
   - patch
+  - create
+  - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -590,6 +592,8 @@ rules:
   - list
   - update
   - patch
+  - create
+  - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

build/yamls/antrea-gke.yml

@@ -488,6 +488,8 @@ rules:
   - list
   - update
   - patch
+  - create
+  - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -590,6 +592,8 @@ rules:
   - list
   - update
   - patch
+  - create
+  - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

build/yamls/antrea-ipsec.yml

@@ -488,6 +488,8 @@ rules:
   - list
   - update
   - patch
+  - create
+  - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -590,6 +592,8 @@ rules:
   - list
   - update
   - patch
+  - create
+  - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

build/yamls/antrea.yml

@@ -488,6 +488,8 @@ rules:
   - list
   - update
   - patch
+  - create
+  - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -590,6 +592,8 @@ rules:
   - list
   - update
   - patch
+  - create
+  - delete
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding

build/yamls/base/agent-rbac.yml

@@ -96,6 +96,8 @@ rules:
       - list
       - update
       - patch
+      - create
+      - delete
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1

build/yamls/base/controller-rbac.yml

@@ -110,6 +110,8 @@ rules:
       - list
       - update
       - patch
+      - create
+      - delete
 ---
 kind: ClusterRoleBinding
 apiVersion: rbac.authorization.k8s.io/v1beta1

build/yamls/base/controller.yml

@@ -132,3 +132,4 @@ spec:
           hostPath:
             path: /var/log/antrea
             type: DirectoryOrCreate
+

docs/antctl.md

@@ -20,6 +20,7 @@ running in two different modes:
   - [Dumping Pod network interface information](#dumping-pod-network-interface-information)
   - [Dumping OVS flows](#dumping-ovs-flows)
   - [OVS packet tracing](#ovs-packet-tracing)
+  - [Traceflow](#traceflow)
 
 ## Installation
 
@@ -313,3 +314,50 @@ result: |
   Megaflow: recirc_id=0x54,eth,ip,in_port=1,nw_frag=no
   Datapath actions: 3
 ```
+
+### Traceflow
+
+`antctl traceflow` command is used to start a traceflow and retrieve its result. After the
+result is collected, the traceflow will be deleted. Users can also create a traceflow with
+`kubectl`, but `antctl traceflow` offers a simpler approach.
+
+The required options for this command
+are `source` and `destination`, which consist of namespace and pod. The command supports
+yaml and json output. If users want a non blocking operation, a option: `--wait=false` can
+be added to start the traceflow without waiting for result. For sure, the deletion operation
+will not be conducted. Besides, users can specify header protocol (ICMP, TCP and UDP) and
+source/destination ports.
+
+e.g.
+```bash
+$ antctl traceflow -S busybox0 -D busybox1
+name: default-busybox0-to-default-busybox1
+phase: Succeeded
+source: default/busybox0
+destination: default/busybox1
+noderesults:
+- node: antrea-linux-testbed7-2
+  role: ""
+  timestamp: 1595391265
+  observations:
+  - component: SpoofGuard
+    componentinfo: ""
+    action: Forwarded
+    pod: ""
+    dstmac: ""
+    networkpolicy: ""
+    ttl: 0
+    translatedsrcip: ""
+    translateddstip: ""
+    tunneldstip: ""
+  - component: Forwarding
+    componentinfo: Output
+    action: Delivered
+    pod: ""
+    dstmac: ""
+    networkpolicy: ""
+    ttl: 0
+    translatedsrcip: ""
+    translateddstip: ""
+    tunneldstip: ""
+```

pkg/antctl/antctl.go

@@ -24,6 +24,7 @@ import (
 	"github.com/vmware-tanzu/antrea/pkg/agent/apiserver/handlers/podinterface"
 	"github.com/vmware-tanzu/antrea/pkg/agent/openflow"
 	"github.com/vmware-tanzu/antrea/pkg/antctl/raw/supportbundle"
+	"github.com/vmware-tanzu/antrea/pkg/antctl/raw/traceflow"
 	"github.com/vmware-tanzu/antrea/pkg/antctl/transform/addressgroup"
 	"github.com/vmware-tanzu/antrea/pkg/antctl/transform/appliedtogroup"
 	"github.com/vmware-tanzu/antrea/pkg/antctl/transform/controllerinfo"
@@ -324,6 +325,11 @@ var CommandList = &commandList{
 			supportAgent:      true,
 			supportController: true,
 		},
+		{
+			cobraCommand:      traceflow.Command,
+			supportAgent:      true,
+			supportController: true,
+		},
 	},
 	codec: scheme.Codecs,
 }