Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-33392

Internal-IP and EXTERNAL-IP are not accessible from Windows workers

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Major Major
    • None
    • 4.14
    • Windows Containers
    • Quality / Stability / Reliability
    • True
    • Hide

      None

      Show
      None
    • 3
    • Important
    • Yes
    • None
    • None
    • None
    • WINC - Sprint 254, WINC - Sprint 256
    • 2
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Description of problem:

      LoadBalancer Internal-IP and EXTERNAL-IP are not accessible from Windows workers
       

      Version-Release number of selected component (if applicable):

      9.0.2-f8d49fb
      4.14.0-0.nightly-2024-05-07-214708  

      How reproducible:

          100%

      Steps to Reproduce:

          1. install WMCO 9.0.2
          2. install 2 Windows machineset     
          3. install Windows service, Linux service, Windows workloads and Linux workload
          4. From windows pods access the Linux server e.g. curl <IP>:8080, access Windows clusterIP      

      Actual results:

         Linux service is not accessible from Windows nodes
      
      win -> Linux Internal-IP does not work
      > oc exec win-webserver-66b77f88bc-8pg7s -- curl 172.30.244.252                       
        % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                       Dload  Upload   Total   Spent    Left  Speed
        0     0    0     0    0     0      0      0 --:--:--  0:00:21 --:--:--     0
      curl: (28) Failed to connect to 172.30.244.252 port 80 after 21028 ms: Couldn't connect to server
      command terminated with exit code 28
      
      Linux -> win  Internal-IP works
      
      > oc exec linux-webserver-568f44c48-5wz4r -- curl 172.30.137.127
        % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                       Dload  Upload   Total   Spent    Left  Speed
      100    63  100    63    0     0   2012      0 --:--:-- --:--:-- --:--:--  2032
      <html><body><H1>Windows Container Web Server</H1></body></html>%                     
      
      
      win -> Linux EXTERNAL-IP does not work
      > oc exec win-webserver-66b77f88bc-8pg7s -- curl 34.172.194.34              
        % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                       Dload  Upload   Total   Spent    Left  Speed
        0     0    0     0    0     0      0      0 --:--:--  0:00:21 --:--:--     0
      curl: (28) Failed to connect to 34.172.194.34 port 80 after 21043 ms: Couldn't connect to server
      command terminated with exit code 28
      
      Linux -> win  EXTERNAL-IP works
      > oc exec linux-webserver-568f44c48-5wz4r -- curl 34.171.167.234              
        % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                       Dload  Upload   Total   Spent    Left  Speed
      100    63  100    63    0     0  13378      0 --:--:-- --:--:-- --:--:-- 15750<html><body><H1>Windows Container Web Server</H1></body></html>
       

      Expected results:

      Linux service is accessable from windows
      

      Additional info:

      > oc get service/linux-webserver -oyaml
      apiVersion: v1
      kind: Service
      metadata:
        creationTimestamp: "2024-05-08T06:26:29Z"
        finalizers:
        - service.kubernetes.io/load-balancer-cleanup
        labels:
          app: linux-webserver
        name: linux-webserver
        namespace: winc-test
        resourceVersion: "38418"
        uid: 465adddd-5468-4dfa-af40-2281764844ad
      spec:
        allocateLoadBalancerNodePorts: true
        clusterIP: 172.30.244.252
        clusterIPs:
        - 172.30.244.252
        externalTrafficPolicy: Cluster
        internalTrafficPolicy: Cluster
        ipFamilies:
        - IPv4
        ipFamilyPolicy: SingleStack
        ports:
        - nodePort: 30208
          port: 8080
          protocol: TCP
          targetPort: 8080
        selector:
          app: linux-webserver
        sessionAffinity: None
        type: LoadBalancer
      status:
        loadBalancer:
          ingress:
          - ip: 34.172.194.34
      
      
                                                                                                                                        > oc get pod -owide                                                                                                                                      NAME                              READY   STATUS    RESTARTS   AGE   IP            NODE                                        NOMINATED NODE   READINESS GATES                                                                                                                                                   linux-webserver-568f44c48-5wz4r   1/1     Running   0          97m   10.128.2.20   weinliu-1696-zjxn2-worker-b-njwq5                         win-webserver-66b77f88bc-8pg7s    1/1     Running   0          98m   10.132.0.2    weinliu-1696-zjxn2-windows-worker-a-8w6zv                 win-webserver-66b77f88bc-f597l    1/1     Running   0          98m   10.132.0.3    weinliu-1696-zjxn2-windows-worker-a-8w6zv                 win-webserver-66b77f88bc-nkb5d    1/1     Running   0          98m   10.132.1.4    weinliu-1696-zjxn2-windows-worker-a-njfrh                 win-webserver-66b77f88bc-sr2gs    1/1     Running   0          98m   10.132.1.3    weinliu-1696-zjxn2-windows-worker-a-njfrh                 win-webserver-66b77f88bc-tdrvt    1/1     Running   0          98m   10.132.1.2    weinliu-1696-zjxn2-windows-worker-a-njfrh                                                                                                                                                                          
      
                                                                                                                                         > oc get service                                                                                                                                         NAME              TYPE           CLUSTER-IP       EXTERNAL-IP      PORT(S)          AGE                                                                  linux-webserver   LoadBalancer   172.30.244.252   34.172.194.34    8080:30208/TCP   97m                                                                  win-webserver     LoadBalancer   172.30.137.127   34.171.167.234   80:31549/TCP     98m                                                                                                                                                            

        1. Screenshot from 2024-05-29 13-55-56.png
          21 kB
          Skyler Clark
        2. Screenshot from 2024-05-29 13-56-09.png
          26 kB
          Skyler Clark
        3. Screenshot from 2024-05-29 13-56-18.png
          11 kB
          Skyler Clark
        4. Screenshot from 2024-06-04 16-29-27.png
          48 kB
          Skyler Clark
        5. Screenshot from 2024-06-04 16-28-55.png
          26 kB
          Skyler Clark
        6. Screenshot from 2024-06-04 16-30-36.png
          6 kB
          Skyler Clark
        7. Screenshot from 2024-06-04 16-29-12.png
          48 kB
          Skyler Clark
        8. Screenshot from 2024-06-04 16-29-38.png
          7 kB
          Skyler Clark
        9. deployment-linux-webserver.yaml
          7 kB
          Jose Valdes
        10. deployment-win-webserver.yaml
          6 kB
          Jose Valdes
        11. service-win-webserver.yaml
          2 kB
          Jose Valdes
        12. service-linux-webserver.yaml
          2 kB
          Jose Valdes
        13. pod-win-webserver-6b89ff7ff-l7jlg.yaml
          7 kB
          Jose Valdes
        14. machine-winworker-lbtnp.yaml
          7 kB
          Jose Valdes
        15. windows-machine-config-operator-75fb6bb77-kbrwp-manager.log
          61 kB
          Jose Valdes

              jvaldes@redhat.com Jose Valdes
              rhn-support-weinliu Weinan Liu
              None
              None
              Weinan Liu Weinan Liu
              None
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: