Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-35440

[aws capi] unnecessary revoke-authorize ingress rules loop

XMLWordPrintable

    • Low
    • No
    • Installer Sprint 256, Installer Sprint 257
    • 2
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, when installing a cluster on {aws-short}, load balancer ingress rules were continuously revoked and re-authorized, causing unnecessary API calls and delays in cluster provisioning. With this update, load balancer ingress rules are no longer revoked during installation, reducing API traffic and installation delays. (link:https://issues.redhat.com/browse/OCPBUGS-35440[*OCPBUGS-35440*])
      Show
      * Previously, when installing a cluster on {aws-short}, load balancer ingress rules were continuously revoked and re-authorized, causing unnecessary API calls and delays in cluster provisioning. With this update, load balancer ingress rules are no longer revoked during installation, reducing API traffic and installation delays. (link: https://issues.redhat.com/browse/OCPBUGS-35440 [* OCPBUGS-35440 *])
    • Bug Fix
    • Done

      Description of problem:

      Because of a bug in upstream CAPA, the Load Balancer ingress rules are continuously revoked and then authorized, causing unnecessary AWS API calls and cluster provision delays.

      Version-Release number of selected component (if applicable):

      4.16+

      How reproducible:

      always

      Steps to Reproduce:

      1.
2.
3.

      Actual results:

      A constant loop of revoke-authorize of ingress rules.

      Expected results:

      Rules should be revoked only when needed (for example, when the installer removes the allow-all ssh rule). In the other cases, rules should be authorized only once.

      Additional info:

      Upstream issue created: https://github.com/kubernetes-sigs/cluster-api-provider-aws/issues/5023
PR submitted upstream: https://github.com/kubernetes-sigs/cluster-api-provider-aws/pull/5024

              rdossant Rafael Fonseca dos Santos
              rdossant Rafael Fonseca dos Santos
              Yunfei Jiang Yunfei Jiang
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: