-
Bug
-
Resolution: Unresolved
-
Minor
-
None
-
4.16, 4.17, 4.18, 4.19
-
None
-
None
-
False
-
Description of problem:
The communication matrix project aims to automatically generate an accurate and up-to-date communication flows matrix that can be delivered to customers as part of product documentation for all ingress flows of OpenShift (see documented communication matrix example[https://docs.openshift.com/container-platform/4.16/installing/install_config/configuring-firewall.html#network-flow-matrix_configuring-firewall]). The communication matrix consists of the cluster's endpoint slices which are created automatically for every service on the cluster. Your operator includes some open ports with missing services, and by that there are missing endpoint slices. To solve this issue, please add service to the following ports: 10260 (master node, TCP protocol), 10258 (master node, TCP protocol), 9258 (master node, TCP protocol). - Note: Specifically, seems like port 9258 has a service, but it uses a wrong label which causes the same problem
Version-Release number of selected component (if applicable):
How reproducible:
Compare between endpoint slices to open ports.
Steps to Reproduce:
1. Get endpoint slices: run the following command: `oc get endpointslices -n <operator's-namespace>` 2. Get open ports: Make sure the `ss` command is available within your pod - if not use the following command to install iprune2 on your pod: `dnf install -y iproute` In order to get ports using TCP protocol run from your node: `ss -anpltH` In order to get ports using UDP protocol run from your node: `ss -anpluH` 3. Compare the ports between the outputs.
Actual results:
The following ports are missing endpoint slices: 10260 (master node, TCP protocol), 10258 (master node, TCP protocol), 9258 (master node, TCP protocol)
Expected results:
Every open port will have an endpoint slice.
Additional info:
In order to resolve this issue, service should be created for the following ports: 10260 (master node, TCP protocol), 10258 (master node, TCP protocol), 9258 (master node, TCP protocol) The endpoint slices should be created automatically once the service is up and connected to the pod correctly.