Dualstack Network Support

[majst01]

Closes #164

Actions Required

The ChildPrefixLength property was removed from the Partition Entity. Every TenantSupernetwork must now be configured with ChildPrefixLength accordingly.
This is done during startup in the database migration step and set to the same value as in the `Partition`.

It is required to add a defaultchildprefixlength property to the tenant super network in you configuration because otherwise the initial network creation will fail:
Sample:
  defaultchildprefixlength:
    IPv4: 22

Also ensure that all firewall-controllers are up-to-date in all firewalls before adding ipv6 prefixes to any of the exiting networks.

Depends on:

• Dualstack Support docs#202
• Dualstack support metalctl#256
• Dualstack support mini-lab#184
• IPv6 Support metal-core#127
• Support IPv6 metal-networker#110
• Update to metal-networker which allows ipv6 rules on firewall creation metal-images#252
• Dual Stack Support gardener-extension-provider-metal#439
• Validate nftables rule files in CI and fix IPv6 metal-networker#114

replaces #544

TODO:

• add possibility to create machines in different networks like internet and tenant-network, but only from tenant-network IPs from both AF are acquired, but only ipv4 is possible from internet even if dualstack

[majst01]

Better introduce a map from AF:Struct which contains defaultchildprefixlenght and usage, deprecate usage.

type FamilyInfo struct {
   defaultchildprefixlength uint8
   usage metal.NetworkUsage
} 

type FamilyInfos map[AddressFamily]FamilyInfo

[majst01]

⌁60% 1d [stefan:~/dev/github.com/metal-stack/mini-lab]└2 <⎈kind-metal-control-plane> master(+36/-5) 1 ± m network ip create --network 5a84db02-265a-4f79-ae42-bbb77bebf4cd  --project 00000000-0000-0000-0000-0000000
00000                                                                                                                                                                                                                
Error: [POST /v1/ip/allocate][500] allocateIP default "{\"statuscode\":500,\"message\":\"Internal cannot allocate free ip in ipam, no ips left\"}"

Check for available AFs is missing here

[majst01]

Also for invalid CIDRs in firewall rules we actually return:

Error: [POST /v1/firewall/allocate][400] allocateFirewall default "{\"statuscode\":400,\"message\":\"invalid cidr: netip.ParsePrefix(\\\"2001:db8::1\\\"): no '/'\"}"

[majst01]

Firewall installation fails with ingress rules with to and from specified

panic: exit status 1: /etc/metal/networker/nftrules_673841649:36:20-35: Error: Could not resolve hostname: Address family for hostname not supported
                ip daddr { 2001:db8:0:113::/64 } ip6 saddr 2001:db8::1/128 tcp dport { 22 } counter accept comment "allow incoming ssh"
                           ^^^^^^^^^^^^^^^^


goroutine 1 [running]:
github.com/metal-stack/metal-networker/pkg/netconf.mustApply({0xb16780, 0xc0003a6ba0}, {0xc0003bc000, 0x1742}, {0xc00037a720, 0x27}, {0xa1baca, 0x13}, 0x1)
        github.com/metal-stack/metal-networker@v0.45.2/pkg/netconf/configurator.go:282 +0x27f
github.com/metal-stack/metal-networker/pkg/netconf.applyAndCleanUp(0xc0002833c0, {0xb16780, 0xc0003a6ba0}, {0xa17f90, 0xc}, {0xc00037a720, 0x27}, {0xa1baca, 0x13}, 0x180, ...)
        github.com/metal-stack/metal-networker@v0.45.2/pkg/netconf/configurator.go:256 +0x1e9
github.com/metal-stack/metal-networker/pkg/netconf.firewallConfigurator.ConfigureNftables({{{{0xc0002632b8, 0x2}, {0xc000010fa8, 0x3, 0x3}, {0xc000026c90, 0x24}, {0xc000144300, 0x2dd}, {0xc000263770, ...}, ...}, ...}, ...}, ...)
        github.com/metal-stack/metal-networker@v0.45.2/pkg/netconf/configurator.go:162 +0x125
github.com/metal-stack/metal-networker/pkg/netconf.firewallConfigurator.Configure({{{{0xc0002632b8, 0x2}, {0xc000010fa8, 0x3, 0x3}, {0xc000026c90, 0x24}, {0xc000144300, 0x2dd}, {0xc000263770, ...}, ...}, ...}, ...}, ...)
        github.com/metal-stack/metal-networker@v0.45.2/pkg/netconf/configurator.go:108 +0xc8
main.(*installer).configureNetwork(0xc00022fe18)
        github.com/metal-stack/metal-images/cmd/install.go:415 +0x1ee
main.(*installer).do(0xc00022fe18)
        github.com/metal-stack/metal-images/cmd/install.go:84 +0x2d6
main.main()
        github.com/metal-stack/metal-images/cmd/main.go:45 +0x4ab

rules:

  - comment: allow incoming ssh
    ports:
      - 22
    protocol: TCP
    from:
      - 2001:db8::1/128
    to:
      - 2001:db8:0:113::/64

[majst01]

⌁60% 1d [stefan:~/dev/github.com/metal-stack/mini-lab]└2 <⎈kind-metal-control-plane> master(+36/-5) 1 ± m network ip create --network 5a84db02-265a-4f79-ae42-bbb77bebf4cd  --project 00000000-0000-0000-0000-0000000
00000                                                                                                                                                                                                                
Error: [POST /v1/ip/allocate][500] allocateIP default "{\"statuscode\":500,\"message\":\"Internal cannot allocate free ip in ipam, no ips left\"}"

Check for available AFs is missing here

Done

[majst01]

"2001:db8::1

Fixed