Uploaded image for project: 'Machine Config Operator'
  1. Machine Config Operator
  2. MCO-1886

Missing endpoint slices for open ports the operator uses (Review)

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • 4.16, 4.18, 4.17, 4.19
    • None
    • 8
    • False
    • Hide

      None

      Show
      None
    • False
    • Not Selected
    • MCO Sprint 267, MCO Sprint 268, MCO Sprint 269, MCO Sprint 270, MCO Sprint 275, MCO Sprint 276, MCO Sprint 278
    • Moderate
    • 0

      Description of problem:

      The communication matrix project aims to automatically generate an accurate and up-to-date communication flows matrix that can be delivered to customers as part of product documentation for all ingress flows of OpenShift (see documented communication matrix example[https://docs.openshift.com/container-platform/4.16/installing/install_config/configuring-firewall.html#network-flow-matrix_configuring-firewall]).
      The communication matrix consists of the cluster's endpoint slices which are created automatically for every service on the cluster. Your operator includes some open ports with missing services, and by that there are missing endpoint slices. To solve this issue, please add service to the following ports: 9637 (worker and master nodes, TCP protocol), 22624 (master node, TCP protocol), 22623 (master node, TCP protocol).

      Version-Release number of selected component (if applicable):

          

      How reproducible:

      Compare between endpoint slices to open ports.

      Steps to Reproduce:

      1. Get endpoint slices:
      run the following command: `oc get endpointslices -n <operator's-namespace>`
      
      2. Get open ports:
      Make sure the `ss` command is available within your pod - if not use the following command to install iprune2 on your pod: `dnf install -y iproute`
      In order to get ports using TCP protocol run from your node:
      `ss -anpltH`
      In order to get ports using UDP protocol run from your node:
      `ss -anpluH`
      
      3. Compare the ports between the outputs.
          

      Actual results:

      The following ports are missing endpoint slices: 9637 (worker and master nodes, TCP protocol), 22624 (master node, TCP protocol), 22623 (master node, TCP protocol).

      Expected results:

      Every open port will have an endpoint slice.

      Additional info:

      In order to resolve this issue, service should be created for the following ports: 9637 (worker and master nodes, TCP protocol), 22624 (master node, TCP protocol), 22623 (master node, TCP protocol).
      The endpoint slices should be created automatically once the service is up.

              team-mco Team MCO
              rh-ee-shmoran Shir Moran
              Sergio Regidor de la Rosa Sergio Regidor de la Rosa
              Votes:
              0 Vote for this issue
              Watchers:
              12 Start watching this issue

                Created:
                Updated: