Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-28757

IPsec (east-west) MTU doesn't runtime migrate on Hypershift Hosted Clusters

XMLWordPrintable

    • Critical
    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None

      Description of problem:

      It was noticed on 4.15 recent builds, Hosted clusters are still on `ovn-ipsec-containarised` instead of `ovn-ipsec-host` pods instead

IPsec MTU difference of 46 bytes also not accounted for (this is missing in 4.14 as well)

$ oc get ds
NAME                      DESIRED   CURRENT   READY   UP-TO-DATE   AVAILABLE   NODE SELECTOR            AGE
ovn-ipsec-containerized   3         3         3       3            3           kubernetes.io/os=linux   55m
ovnkube-node              3         3         3       3            3           kubernetes.io/os=linux   95m

      Version-Release number of selected component (if applicable):

          4.15.0-0.nightly-2024-01-31-032716

      How reproducible:

      Always

      Steps to Reproduce:

          1.Install Hypershift mgmt and hosted cluster on 4.15
    2. change IPsec mode to Full on hosted
    3.

      Actual results:

          IPSec MTU not accounted correctly on hosted

      Expected results:

          correct MTU accounted for IPsec headers

      Additional info:

      MG: http://10.19.166.176/~anusaxen/must-gather.local.421757551221323603/    

            ykashtan Yuval Kashtan
            anusaxen Anurag Saxena
            Anurag Saxena Anurag Saxena
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: