Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-48301

[GCP][EIP UDN layer2 pre-merge testing] in SGW mode, EIP on UDN layer2 use wrong IP as source IP whether it is from local pod or remote pod

XMLWordPrintable

    • Critical
    • No
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Hide
      *Cause*: the user action or circumstances that trigger the bug
      *Consequence*: what the user experience is when the bug occurs
      *Workaround*: if available
      *Result*: mandatory if the workaround does not solve the problem completely
      Show
      *Cause*: the user action or circumstances that trigger the bug *Consequence*: what the user experience is when the bug occurs *Workaround*: if available *Result*: mandatory if the workaround does not solve the problem completely
    • Known Issue
    • In Progress

      Description of problem: [EIP UDN layer2 pre-merge testing] in SGW mode on GCP, EIP on UDN layer2 use wrong IP as source IP whether it is from local pod or remote pod

      Version-Release number of selected component (if applicable):

      How reproducible:

      Steps to Reproduce:

      1. label a node as egress node

      2. create a namespace, create a layer2 UDN in it

      3. Create an egressIP object, wait till it is assigned to egress node

      4. create multiple test pods, label namespace and pods accordingly to match namespaceSelector and podSelector of the egressIP

      5. curl external from pod that is local to the egress node, and curl external from another pod that is remote to the egress node

      Actual results: pods that are qualified to use egressIP are not using egressIP as source IP of egress packets, instead local pod is using its residing node's IP as source IP, remote pod is using its UDN pod IP as source IP

      Expected results: pods that are qualified to use egressIP should use egressIP as source IP of egress packets

      Additional info:

      test details:  https://docs.google.com/document/d/1zr5-Vp59s2NX2c8uZ5BqKePxel12e58T6I3xosnOEhI/edit?usp=sharing

       

      must-gather: https://drive.google.com/file/d/1amQHXl_i0cflXQXd29puex9Jo693vtka/view?usp=drive_link 

      Please fill in the following template while reporting a bug and provide as much relevant information as possible. Doing so will give us the best chance to find a prompt resolution.

      Affected Platforms:

      Is it an

      1. internal CI failure
      2. customer issue / SD
      3. internal RedHat testing failure

      If it is an internal RedHat testing failure:

      • Please share a kubeconfig or creds to a live cluster for the assignee to debug/troubleshoot along with reproducer steps (specially if it's a telco use case like ICNI, secondary bridges or BM+kubevirt).

      If it is a CI failure:

      • Did it happen in different CI lanes? If so please provide links to multiple failures with the same error instance
      • Did it happen in both sdn and ovn jobs? If so please provide links to multiple failures with the same error instance
      • Did it happen in other platforms (e.g. aws, azure, gcp, baremetal etc) ? If so please provide links to multiple failures with the same error instance
      • When did the failure start happening? Please provide the UTC timestamp of the networking outage window from a sample failure run
      • If it's a connectivity issue,
      • What is the srcNode, srcIP and srcNamespace and srcPodName?
      • What is the dstNode, dstIP and dstNamespace and dstPodName?
      • What is the traffic path? (examples: pod2pod? pod2external?, pod2svc? pod2Node? etc)

      If it is a customer / SD issue:

      • Provide enough information in the bug description that Engineering doesn't need to read the entire case history.
      • Don't presume that Engineering has access to Salesforce.
      • Do presume that Engineering will access attachments through supportshell.
      • Describe what each relevant attachment is intended to demonstrate (failed pods, log errors, OVS issues, etc).
      • Referring to the attached must-gather, sosreport or other attachment, please provide the following details:
        • If the issue is in a customer namespace then provide a namespace inspect.
        • If it is a connectivity issue:
          • What is the srcNode, srcNamespace, srcPodName and srcPodIP?
          • What is the dstNode, dstNamespace, dstPodName and dstPodIP?
          • What is the traffic path? (examples: pod2pod? pod2external?, pod2svc? pod2Node? etc)
          • Please provide the UTC timestamp networking outage window from must-gather
          • Please provide tcpdump pcaps taken during the outage filtered based on the above provided src/dst IPs
        • If it is not a connectivity issue:
          • Describe the steps taken so far to analyze the logs from networking components (cluster-network-operator, OVNK, SDN, openvswitch, ovs-configure etc) and the actual component where the issue was seen based on the attached must-gather. Please attach snippets of relevant logs around the window when problem has happened if any.
      • When showing the results from commands, include the entire command in the output.  
      • For OCPBUGS in which the issue has been identified, label with "sbr-triaged"
      • For OCPBUGS in which the issue has not been identified and needs Engineering help for root cause, label with "sbr-untriaged"
      • Do not set the priority, that is owned by Engineering and will be set when the bug is evaluated
      • Note: bugs that do not meet these minimum standards will be closed with label "SDN-Jira-template"
      • For guidance on using this template please see
        OCPBUGS Template Training for Networking  components

              mkennell@redhat.com Martin Kennelly
              jechen@redhat.com Jean Chen
              Jean Chen Jean Chen
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated: