Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-10896

CNF Upstream MultiNetworkPolicy SR-IOV integration backport 4.13

    XMLWordPrintable

Details

    • Important
    • Yes
    • CNF Network Sprint 234
    • 1
    • False
    • Hide

      None

      Show
      None

    Description

      Description of problem:

      Running CNF upstream MultiNetworkPolicy SR-IOV integration tests are failing. A fix has been created and merged to master 4.14. The fix needs to be backported. Backport PR open https://github.com/openshift-kni/cnf-features-deploy/pull/1447

      Version-Release number of selected component (if applicable):

      4.13.0

      How reproducible:

       

      Steps to Reproduce:

      1.
      2.
      3.
      

      Actual results:

      20:49:53  • Failure [195.810 seconds]
      20:49:53  [multinetworkpolicy] MultiNetworkPolicy SR-IOV integration
      20:49:53  /remote-source/app/cnf-tests/testsuites/e2esuite/multinetworkpolicy/multinetworkpolicy_sriov.go:61
      20:49:53    Ingress
      20:49:53    /remote-source/app/cnf-tests/testsuites/e2esuite/multinetworkpolicy/multinetworkpolicy_sriov.go:158
      20:49:53      DENY all traffic to a pod [It]
      20:49:53      /remote-source/app/cnf-tests/testsuites/e2esuite/multinetworkpolicy/multinetworkpolicy_sriov.go:159
      20:49:53  
      20:49:53      Timed out after 38.851s.
      20:49:53      Error: can't connect pods [testpod-b-7w6sk] -> [testpod-c-nn9hf]: remote command [bash -c echo '1456155 (sriov-conformance-testing-x/testpod-b-7w6sk)-<err: cannot get networks status from pod [testpod-c-nn9hf] annotation [k8s.v1.cni.cncf.io/networks-status]>:5555TCP' | nc -w 1  <err: cannot get networks status from pod [testpod-c-nn9hf] annotation [k8s.v1.cni.cncf.io/networks-status]> 5555] error [command terminated with exit code 1]. output [bash: err:: No such file or directory
      20:49:53      ]
      20:49:53      Server iptables
      20:49:53      Chain INPUT (policy ACCEPT 3 packets, 912 bytes)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53          3   912 MULTI-INGRESS  all  --  net1   *       0.0.0.0/0            0.0.0.0/0           
      20:49:53      
      20:49:53      Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            169.254.169.254      tcp dpt:!53 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     udp  --  *      *       0.0.0.0/0            169.254.169.254      udp dpt:!53 reject-with icmp-port-unreachable
      20:49:53      
      20:49:53      Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53          0     0 MULTI-EGRESS  all  --  *      net1    0.0.0.0/0            0.0.0.0/0           
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            169.254.169.254      tcp dpt:!53 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     udp  --  *      *       0.0.0.0/0            169.254.169.254      udp dpt:!53 reject-with icmp-port-unreachable
      20:49:53      
      20:49:53      Chain MULTI-INGRESS (1 references)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53      
      20:49:53      Chain MULTI-EGRESS (1 references)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53      
      20:49:53      Chain MULTI-INGRESS-COMMON (0 references)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53      
      20:49:53      Chain MULTI-EGRESS-COMMON (0 references)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53      
      20:49:53      ---
      20:49:53      Client iptables
      20:49:53      Chain INPUT (policy ACCEPT 4 packets, 1216 bytes)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53          3   912 MULTI-INGRESS  all  --  net1   *       0.0.0.0/0            0.0.0.0/0           
      20:49:53      
      20:49:53      Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            169.254.169.254      tcp dpt:!53 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     udp  --  *      *       0.0.0.0/0            169.254.169.254      udp dpt:!53 reject-with icmp-port-unreachable
      20:49:53      
      20:49:53      Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53          0     0 MULTI-EGRESS  all  --  *      net1    0.0.0.0/0            0.0.0.0/0           
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22623 flags:0x17/0x02 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:22624 flags:0x17/0x02 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     tcp  --  *      *       0.0.0.0/0            169.254.169.254      tcp dpt:!53 reject-with icmp-port-unreachable
      20:49:53          0     0 REJECT     udp  --  *      *       0.0.0.0/0            169.254.169.254      udp dpt:!53 reject-with icmp-port-unreachable
      20:49:53      
      20:49:53      Chain MULTI-INGRESS (1 references)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53      
      20:49:53      Chain MULTI-EGRESS (1 references)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53      
      20:49:53      Chain MULTI-INGRESS-COMMON (0 references)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53      
      20:49:53      Chain MULTI-EGRESS-COMMON (0 references)
      20:49:53       pkts bytes target     prot opt in     out     source               destination         
      20:49:53      
      20:49:53  
      20:49:53      /remote-source/app/cnf-tests/testsuites/e2esuite/multinetworkpolicy/multinetworkpolicy_sriov.go:172

      Expected results:

      Pass

      Additional info:

       

      Attachments

        Activity

          People

            gkopels@redhat.com Gregory Kopels
            sscheink@redhat.com Sebastian Scheinkman
            Gregory Kopels Gregory Kopels
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: