Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-30301

Guest nodes can't join the cluster with NodePort publish strategy

    XMLWordPrintable

Details

    • No
    • False
    • Hide

      None

      Show
      None

    Description

      Description of problem:

      When creating an HostedCluster with 'NodePort' service publishing strategy, the VMs (guest nodes) are trying to contact HCP services, such as ignition and oauth. If these services are colocated on the same infra node, they can't be reached via NodePort because the 'virt-launcher' NetworkPolicy is blocking it.
      Need to explicitly add access to oauth and ignition-server-proxy pods so they can be reached from the virtual machines on the same node.

      Version-Release number of selected component (if applicable):

      4.16.0

      How reproducible:

      Always, if conditions are met

      Steps to Reproduce:

          1. As described above
          2.
          3.
          

      Actual results:

      VMs are not joining the cluster as nodes if the ignition server is running on the same infra node as the VM.

      Expected results:

      All VMs are joining the cluster as nodes, and the HostedCluster is eventually Completed and Available

      Additional info:

          

      Attachments

        Activity

          People

            ocohen@redhat.com Oren Cohen
            ocohen@redhat.com Oren Cohen
            Liangquan Li Liangquan Li
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

            Dates

              Created:
              Updated: