Uploaded image for project: 'Openshift sandboxed containers'
  1. Openshift sandboxed containers
  2. KATA-2583

podvm setup-nat-for-imds.service is failing on AWS

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Medium Medium
    • OSC 1.5.1
    • OSC 1.5.0
    • None
    • None
    • False
    • None
    • False
    • Hide
      When you request the instance metadata of a peer pod VM running on AWS or Azure, the AWS or Azure Instance Metadata Service returns the metadata of the worker node instead of the pod. There is no workaround for this issue. (link:https://issues.redhat.com/browse/KATA-2583[*KATA-2583*])
      Show
      When you request the instance metadata of a peer pod VM running on AWS or Azure, the AWS or Azure Instance Metadata Service returns the metadata of the worker node instead of the pod. There is no workaround for this issue. (link: https://issues.redhat.com/browse/KATA-2583 [* KATA-2583 *])
    • Known Issue
    • Done
    • Kata Sprint #246
    • 0
    • 0

      Description

      setup-nat-for-imds.service should configure network properly to enable it to recieve instance metadata

      Steps to reproduce

      1. setup peerpod on aws
      2. launch a kata-remote pod with default t3.small instance type
      3. retrieve podvm instance metadata by rsh pod:

      curl http://169.254.169.254/latest/meta-data/instance-type

      Expected result

      proper instance metadata is recieved (t3.small)

      Actual result

      sh-4.4$ curl
      http://169.254.169.254/latest/meta-data/instance-type
      m6i.xlargesh

      Impact

      metadata recieved are of the worker node, not the podvm

      Additional helpful info

      [ec2-user@ip-10-0-57-43 ~]$ systemctl status setup-nat-for-imds
      ○ setup-nat-for-imds.service - Setup NAT for IMDS
      Loaded: loaded (/etc/systemd/system/setup-nat-for-imds.service; disabled; vendor preset: disabled)
      Active: inactive (dead)
      [ec2-user@ip-10-0-57-43 ~]$ journalctl -xeu setup-nat-for-imds.service

      Nov 22 13:11:50 ip-10-0-57-43.us-east-2.compute.internal systemd[1]: Starting Setup NAT for IMDS...
      ░░ Subject: A start job for unit setup-nat-for-imds.service has begun execution
      ░░ Defined-By: systemd
      ░░ Support: https://access.redhat.com/support
      ░░ 
      ░░ A start job for unit setup-nat-for-imds.service has begun execution.
      ░░ 
      ░░ The job identifier is 3627.
      Nov 22 13:11:50 ip-10-0-57-43.us-east-2.compute.internal setup-nat-for-imds.sh[1389]: net.ipv4.ip_forward = 1
      Nov 22 13:11:50 ip-10-0-57-43.us-east-2.compute.internal setup-nat-for-imds.sh[1390]: net.ipv4.conf.veth1.proxy_arp = 1
      Nov 22 13:11:50 ip-10-0-57-43.us-east-2.compute.internal setup-nat-for-imds.sh[1391]: net.ipv4.neigh.veth1.proxy_delay = 0
      Nov 22 13:11:50 ip-10-0-57-43.us-east-2.compute.internal setup-nat-for-imds.sh[1403]: /usr/local/bin/setup-nat-for-imds.sh: line 39: iptables: command not found
      Nov 22 13:11:50 ip-10-0-57-43.us-east-2.compute.internal systemd[1]: setup-nat-for-imds.service: Main process exited, code=exited, status=127/n/a
      ░░ Subject: Unit process exited
      ░░ Defined-By: systemd
      ░░ Support: https://access.redhat.com/support
      ░░ 
      ░░ An ExecStart= process belonging to unit setup-nat-for-imds.service has exited.
      ░░ 
      ░░ The process' exit code is 'exited' and its exit status is 127.
      Nov 22 13:11:50 ip-10-0-57-43.us-east-2.compute.internal systemd[1]: setup-nat-for-imds.service: Failed with result 'exit-code'.
      ░░ Subject: Unit failed
      ░░ Defined-By: systemd
      ░░ Support: https://access.redhat.com/support
      ░░ 
      ░░ The unit setup-nat-for-imds.service has entered the 'failed' state with result 'exit-code'.
      Nov 22 13:11:50 ip-10-0-57-43.us-east-2.compute.internal systemd[1]: Failed to start Setup NAT for IMDS.
      ░░ Subject: A start job for unit setup-nat-for-imds.service has failed
      ░░ Defined-By: systemd
      ░░ Support: https://access.redhat.com/support
      ░░ 
      ░░ A start job for unit setup-nat-for-imds.service has finished with a failure.
      ░░ 
      ░░ The job identifier is 3627 and the job result is failed.

            ssheribe@redhat.com Snir sheriber
            rhn-support-vvoronko Victor Voronkov
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: