Uploaded image for project: 'Network Observability'
  1. Network Observability
  2. NETOBSERV-2452

Default Network Policy doesn't work with OpenShiftSDN

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • netobserv-1.10
    • Console Plugin
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      See slack thread: https://redhat-internal.slack.com/archives/C02939DP5L5/p1760647339302859 

       

      Description of problem:

      When using OpenShiftSDN, the default network policy deployed for netobserv blocks the traffic between Agents and FLP pods

      Steps to Reproduce:

      1. Deploy a cluster with OpenShiftSDN networking plugin (instead of OVN-k)
      2. Deploy Netobserv with default FlowCollector
      3.
      

      Actual results:

      No flows. Agents show errors such as:
      time="2025-10-17T13:53:39Z" level=error msg="couldn't send flow records to collector" collector="10.0.68.187:2055" component=exporter/GRPCProto error="rpc error: code = Unavailable desc = connection error: desc = \"transport: Error while dialing: dial tcp 10.0.68.187:2055: i/o timeout\""

      Expected results:

      Flows are successfully sent to FLP and stored in Loki - they are visible from the console plugin.

       

      Workaround: disable the network policy via FlowCollector "spec.networkPolicy.enable"

      Note that this bug shouldn't happen after upgrading from netobserv 1.9.z, since it that case, the default is still to not have a network policy deployed automatically.

              Unassigned Unassigned
              jtakvori Joel Takvorian
              None
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: