-
Bug
-
Resolution: Done-Errata
-
Major
-
4.14
-
Quality / Stability / Reliability
-
False
-
-
None
-
Critical
-
No
-
None
-
Rejected
-
None
-
In Progress
-
Release Note Not Required
-
NA
-
None
-
None
-
None
-
None
Description of problem:
Version-Release number of selected component (if applicable):
pre-merge testing or 4.14.0-0.nightly-2023-08-20-085537
How reproducible:
Always
Steps to Reproduce:
1. Label one worker node as egress node and enable ipforarding on it
2. Create an egressip object, it can be assigned to egress node
oc get egressip
NAME EGRESSIPS ASSIGNED NODE ASSIGNED EGRESSIPS
egressip-1 172.22.0.100 worker-2.sriov.openshift-qe.sdn.com 172.22.0.100
oc get egressip -o yaml
apiVersion: v1
items:
- apiVersion: k8s.ovn.org/v1
kind: EgressIP
metadata:
creationTimestamp: "2023-08-11T03:46:19Z"
generation: 7
name: egressip-1
resourceVersion: "169277"
uid: 7692bea5-c072-41e5-aa7a-acfa737a5428
spec:
egressIPs:
- 172.22.0.100
namespaceSelector:
matchLabels:
name: qe
status:
items:
- egressIP: 172.22.0.100
node: worker-2.sriov.openshift-qe.sdn.com
kind: List
metadata:
resourceVersion: ""
3. Create a namespace test and some pods on it. add a label to namespace matching egressIP object.
4. From pod to access the bastion host
Actual results:
Outgoing traffic was timeout
From bastion node,it didn't get correct MAC for egressIP
? (172.22.0.100) at <incomplete> on sriovpr
egressIP was not added to secondary NIC on egress node
oc debug node/worker-2.sriov.openshift-qe.sdn.com
Temporary namespace openshift-debug-crpt9 is created for debugging node...
Starting pod/worker-2sriovopenshift-qesdncom-debug-s857l ...
To use host binaries, run `chroot /host`
Pod IP: 192.168.111.25
If you don't see a command prompt, try pressing enter.
sh-4.4# ip a show enp1s0
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 00:32:ca:4e:a8:bf brd ff:ff:ff:ff:ff:ff
inet 172.22.0.50/24 scope global enp1s0
valid_lft forever preferred_lft forever
inet6 fd00:1101::65fe:9a70:ab40:4c1a/128 scope global dynamic noprefixroute
valid_lft 85269sec preferred_lft 85269sec
inet6 fe80::232:caff:fe4e:a8bf/64 scope link noprefixroute
valid_lft forever preferred_lft forever
Expected results:
EgressIP works well on secondary NIC
Additional info:
- is cloned by
-
OCPBUGS-19889 [4.14][Multi-NIC]EgressIP was not added to secondary NIC on egress node after apply the configuration
-
- Closed
-
- is depended on by
-
OCPBUGS-19889 [4.14][Multi-NIC]EgressIP was not added to secondary NIC on egress node after apply the configuration
-
- Closed
-
- links to
-
RHEA-2023:7198
rpm