-
Bug
-
Resolution: Done
-
Undefined
-
None
-
4.18, 4.19
-
None
-
None
-
False
-
Description of problem:
The communication matrix project aims to automatically generate an accurate and up-to-date communication flows matrix that can be delivered to customers as part of product documentation for all ingress flows of OpenShift (see documented communication matrix example[https://docs.openshift.com/container-platform/4.16/installing/install_config/configuring-firewall.html#network-flow-matrix_configuring-firewall]). Port 9447 is documented in the bare metal multi node communication matrix although the port is not open in versions 4.18 and abpove.
Version-Release number of selected component (if applicable):
How reproducible:
Extract open ports in a 4.18 (or above) bare metal multi node cluster, notice that port 9447 does not appear while it is documented in the corresponding versioned communication matrix.
Steps to Reproduce:
1. Open the documented communication matrix (see example for 4.18: https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/installation_configuration/configuring-firewall#network-[…]-firewall) Get open ports: Make sure the `ss` command is available within your pod - if not use the following command to install iprune2 on your pod: `dnf install -y iproute` In order to get ports using TCP protocol run from your node: `ss -anpltH` In order to get ports using UDP protocol run from your node: `ss -anpluH` 2.Check if port 9447 does or does not appear in both open ports matrix and documented commatrix.
Actual results:
Port 9447 doesn't appear in open port matrix, but does appear in documented communication matrix.
Expected results:
Port 9447 shouldn't appear in documented communication matrix versions 4.18 and above.
Additional info: