- 
    Bug 
- 
    Resolution: Unresolved
- 
    Undefined 
- 
    None
- 
    4.21
- 
    None
- 
        Quality / Stability / Reliability
- 
        False
- 
        
- 
        None
- 
        None
- 
        None
- 
        None
- 
        None
- 
        None
- 
        Proposed
- 
        Bug Fix
- 
        
- 
        None
- 
        None
- 
        None
- 
        None
This is a clone of issue OCPBUGS-63519. The following is the description of the original issue: 
—
Description of problem:
The communication matrix project aims to automatically generate an accurate and up-to-date communication flows matrix that can be delivered to customers as part of product documentation for all ingress flows of OpenShift (see documented communication matrix example[https://docs.openshift.com/container-platform/4.16/installing/install_config/configuring-firewall.html#network-flow-matrix_configuring-firewall]). The communication matrix consists of the cluster's endpoint slices which are created automatically for every service on the cluster. Your operator includes some open ports that are not connected to a service, and by that there are missing endpoint slices. To solve this issue, please connect a service to the following ports: 9193 and 9194 (master node, TCP protocol).
Version-Release number of selected component (if applicable):
    
How reproducible:
Compare between endpoint slices to open ports. compare to the ss command
Steps to Reproduce:
1. Get endpoint slices: run the following command: `oc get endpointslices -n <operator's-namespace>` 2. Get open ports: Make sure the `ss` command is available within your pod - if not use the following command to install iprune2 on your pod: `dnf install -y iproute` In order to get ports using TCP protocol run from your node: `ss -anpltH` In order to get ports using UDP protocol run from your node: `ss -anpluH` 3. Compare the ports between the outputs.
Actual results:
    the following ports are used but don't have an endpointslice: 
     Ingress,TCP,9193,openshift-cluster-machine-approver,machine-approve,machine-approver-capi-64d5ccdc56-q6tkb,machine-approver-controller,master,false
    Ingress,TCP,9194,openshift-cluster-machine-approver,kube-rbac-proxy,machine-approver-capi-64d5ccdc56-q6tkb,kube-rbac-proxy,master,false
        
Expected results:
Every open port will have an endpoint slice.
Additional info:
In order to resolve this issue, a service should be connected to the following ports: 9194 and 9193 (master node, TCP protocol). The endpoint slices should be created automatically once the service is up.
- clones
- 
                    OCPBUGS-63519 Missing endpoint slices for open ports the operator uses -         
- Verified
 
-         
- is blocked by
- 
                    OCPBUGS-63519 Missing endpoint slices for open ports the operator uses -         
- Verified
 
-         
- links to