Uploaded image for project: 'OpenShift Virtualization'
  1. OpenShift Virtualization
  2. CNV-24889

[2165895] Cannot SSH into VM over NodePort and Console's FQDN when using OVNKubernetes networking

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False
    • NoActiveCustomerTickets
    • CLOSED
    • This issue needs to be documented as a known issue.
    • Known Issue
    • Proposed
    • ---
    • ---
    • High

      Description of problem:
      You cannot ssh into a VM when using "networkType: OVNKubernetes"

      Copied from https://issues.redhat.com/browse/CNV-21779

      Version-Release number of selected component (if applicable):

      How reproducible:
      always

      Steps to Reproduce:
      1. Perform an IPI install on baremetal and set the following in the install-config.yaml
      networking:
      machineNetwork:

      • cidr: 172.22.0.0/16
        networkType: OVNKubernetes
        2. Install openshift virtualization
        3. Create a VM using the GUI and select the box to enable ssh access to the vm
        4. Attach an ssh public key
        5. Start the VM
        6. Try to ssh into the VM.

      Actual results:
      get the following message:
      ssh: connect to host console-openshift-console.apps.cluster.example.org port 30378: Connection timed out

      Expected results:
      a successful connection to the VM

      Additional info:
      Apllying the following command will allow ssh access into the VM.

      oc patch network.operator cluster -p '{"spec":{"defaultNetwork":{"ovnKubernetesConfig":

      {"gatewayConfig":"routingViaHost":true}

      }}}}' --type=merge

      It would be useful to have this listed in the documentation on creating a VM.

      Table 4.6 in the following documentation mentions this option.
      https://access.redhat.com/documentation/en-us/openshift_container_platform/4.10/html-single/networking/index

      But without good understanding of OpenShift networking, this may not be enough for someone to understand this needs to be done.

            tnisan@redhat.com Tal Nisan
            phoracek@redhat.com Petr Horacek
            Votes:
            0 Vote for this issue
            Watchers:
            10 Start watching this issue

              Created:
              Updated:
              Resolved: