$ cat /etc/microshift/config.yaml network: clusterNetwork: - fd01::/48 serviceNetwork: - fd02::/112 node: nodeIP: 2a05:d012:e04:6200:5a96:2981:e79e:66a $ oc get pod -A -o wide NAMESPACE NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES kube-system csi-snapshot-controller-5496fdc5f-4rv9x 0/1 Error 1 (36s ago) 85s fd01:0:0:1::8 i-0ddbe8e3cab456cc6.eu-west-3.compute.internal kube-system csi-snapshot-webhook-6d744ff8c9-lj47w 0/1 ContainerCreating 0 82s i-0ddbe8e3cab456cc6.eu-west-3.compute.internal openshift-dns dns-default-cx6rc 0/2 ContainerCreating 0 69s i-0ddbe8e3cab456cc6.eu-west-3.compute.internal openshift-dns node-resolver-qrbgr 1/1 Running 0 84s 2a05:d012:f0a:0:ad8e:a095:1f70:7a56 i-0ddbe8e3cab456cc6.eu-west-3.compute.internal openshift-ingress router-default-845ffd5d6c-ljh2r 1/1 Running 0 83s fd01:0:0:1::4 i-0ddbe8e3cab456cc6.eu-west-3.compute.internal openshift-ovn-kubernetes ovnkube-master-sj9t6 4/4 Running 0 84s 2a05:d012:f0a:0:ad8e:a095:1f70:7a56 i-0ddbe8e3cab456cc6.eu-west-3.compute.internal openshift-ovn-kubernetes ovnkube-node-n4pz8 1/1 Running 0 84s 2a05:d012:f0a:0:ad8e:a095:1f70:7a56 i-0ddbe8e3cab456cc6.eu-west-3.compute.internal openshift-service-ca service-ca-6686786d4f-vfgmn 1/1 Running 1 (11s ago) 82s fd01:0:0:1::6 i-0ddbe8e3cab456cc6.eu-west-3.compute.internal openshift-storage topolvm-controller-55c449965b-rkmgm 5/5 Running 0 85s fd01:0:0:1::5 i-0ddbe8e3cab456cc6.eu-west-3.compute.internal openshift-storage topolvm-node-9zdh8 3/3 Running 0 69s fd01:0:0:1::a i-0ddbe8e3cab456cc6.eu-west-3.compute.internal $ oc describe svc kubernetes Name: kubernetes Namespace: default Labels: component=apiserver provider=kubernetes Annotations: Selector: Type: ClusterIP IP Family Policy: SingleStack IP Families: IPv6 IP: fd02::1 IPs: fd02::1 Port: https 443/TCP TargetPort: 6443/TCP Endpoints: [fd02::1:0]:6443 Session Affinity: None Events: $ ip -6 neigh fd01:0:0:1::4 dev ovn-k8s-mp0 lladdr 0a:58:4c:2c:c5:c6 REACHABLE fd01:0:0:1::5 dev ovn-k8s-mp0 lladdr 0a:58:87:e8:4b:af REACHABLE fd01:0:0:1::a dev ovn-k8s-mp0 lladdr 0a:58:75:0c:67:b1 REACHABLE fd01:0:0:1::1 dev ovn-k8s-mp0 lladdr 0a:58:06:cc:5b:0e PERMANENT fd01:0:0:1::6 dev ovn-k8s-mp0 INCOMPLETE fd69::4 dev br-ex lladdr 0a:58:1b:ac:71:41 PERMANENT fd69::1 dev br-ex lladdr 0a:58:37:85:74:a5 PERMANENT fd01:0:0:1::8 dev ovn-k8s-mp0 INCOMPLETE fe80::442:54ff:fe27:d51d dev eth0 lladdr 06:42:54:27:d5:1d router REACHABLE $ ip -6 a s 1: lo: mtu 65536 state UNKNOWN qlen 1000 inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: mtu 9001 state UP qlen 1000 inet6 2a05:d012:f0a:0:ad8e:a095:1f70:7a56/128 scope global dynamic noprefixroute valid_lft 444sec preferred_lft 134sec inet6 fe80::4d9:86ff:fe19:c95/64 scope link noprefixroute valid_lft forever preferred_lft forever 4: br-ex: mtu 1500 state UNKNOWN qlen 1000 inet6 fd69::2/125 scope global nodad deprecated valid_lft forever preferred_lft 0sec inet6 fd02::1:0/128 scope global valid_lft forever preferred_lft forever 5: ovn-k8s-mp0: mtu 1500 state UNKNOWN qlen 1000 inet6 fd01:0:0:1::2/64 scope global valid_lft forever preferred_lft forever 7: ef9b904a35965fb@eth0: mtu 1500 state UP inet6 fe80::b4f5:7cff:fe34:7f3f/64 scope link valid_lft forever preferred_lft forever 8: 2d73d5e0cbcfcf4@eth0: mtu 1500 state UP inet6 fe80::2077:4aff:fe32:4f74/64 scope link valid_lft forever preferred_lft forever 9: 01125af984f3d94@eth0: mtu 1500 state UP inet6 fe80::1ca9:a1ff:fe67:aff3/64 scope link valid_lft forever preferred_lft forever 10: a9a98d44f0d7419@eth0: mtu 1500 state UP inet6 fe80::7c5e:9ff:fe91:dc50/64 scope link valid_lft forever preferred_lft forever 11: fb23cba832b709f@eth0: mtu 1500 state UP inet6 fe80::ccaa:75ff:fe09:fcec/64 scope link valid_lft forever preferred_lft forever $ ip -6 r ::1 dev lo proto kernel metric 256 pref medium 2a05:d012:f0a:0:ad8e:a095:1f70:7a56 dev eth0 proto kernel metric 100 pref medium 2a05:d012:f0a::/64 dev eth0 proto ra metric 100 pref medium fd01:0:0:1::/64 dev ovn-k8s-mp0 proto kernel metric 256 pref medium fd01::/48 via fd01:0:0:1::1 dev ovn-k8s-mp0 metric 1024 pref medium fd02::/112 via fd69::4 dev br-ex src fd69::2 metric 1024 mtu 1500 pref medium fd02::1:0 dev br-ex proto kernel metric 256 pref medium fd69::1 dev br-ex src 2a05:d012:f0a:0:ad8e:a095:1f70:7a56 metric 1024 pref medium fd69::3 via fd01:0:0:1::1 dev ovn-k8s-mp0 metric 1024 pref medium fd69::/125 dev br-ex proto kernel metric 256 pref medium fe80::/64 dev ef9b904a35965fb proto kernel metric 256 pref medium fe80::/64 dev 2d73d5e0cbcfcf4 proto kernel metric 256 pref medium fe80::/64 dev 01125af984f3d94 proto kernel metric 256 pref medium fe80::/64 dev a9a98d44f0d7419 proto kernel metric 256 pref medium fe80::/64 dev fb23cba832b709f proto kernel metric 256 pref medium fe80::/64 dev eth0 proto kernel metric 1024 pref medium default via fe80::442:54ff:fe27:d51d dev eth0 proto ra metric 100 pref medium $ ip -6 r get fd01:0:0:1::8 fd01:0:0:1::8 dev ovn-k8s-mp0 proto kernel src fd01:0:0:1::2 metric 256 pref medium $ ip -6 r get fd01:0:0:1::6 fd01:0:0:1::6 dev ovn-k8s-mp0 proto kernel src fd01:0:0:1::2 metric 256 pref medium $ sudo ip6tables -t nat -S -P PREROUTING ACCEPT -P INPUT ACCEPT -P OUTPUT ACCEPT -P POSTROUTING ACCEPT -N KUBE-KUBELET-CANARY -N OVN-KUBE-EGRESS-SVC -N OVN-KUBE-ETP -N OVN-KUBE-EXTERNALIP -N OVN-KUBE-ITP -N OVN-KUBE-NODEPORT -N OVN-KUBE-SNAT-MGMTPORT -A PREROUTING -j OVN-KUBE-ETP -A PREROUTING -j OVN-KUBE-EXTERNALIP -A PREROUTING -j OVN-KUBE-NODEPORT -A OUTPUT -j OVN-KUBE-EXTERNALIP -A OUTPUT -j OVN-KUBE-NODEPORT -A OUTPUT -j OVN-KUBE-ITP -A POSTROUTING -j OVN-KUBE-EGRESS-SVC -A POSTROUTING -o ovn-k8s-mp0 -j OVN-KUBE-SNAT-MGMTPORT -A POSTROUTING -s fd69::1/128 -j MASQUERADE -A POSTROUTING -s fd01:0:0:1::/64 -j MASQUERADE -A OVN-KUBE-ETP -d fd69::2/128 -p tcp -m tcp --dport 443 -j DNAT --to-destination [fd69::3]:32637 -A OVN-KUBE-ETP -d fd02::1:0/128 -p tcp -m tcp --dport 443 -j DNAT --to-destination [fd69::3]:32637 -A OVN-KUBE-ETP -d fd01:0:0:1::2/128 -p tcp -m tcp --dport 443 -j DNAT --to-destination [fd69::3]:32637 -A OVN-KUBE-ETP -d 2a05:d012:f0a:0:ad8e:a095:1f70:7a56/128 -p tcp -m tcp --dport 443 -j DNAT --to-destination [fd69::3]:32637 -A OVN-KUBE-ETP -p tcp -m addrtype --dst-type LOCAL -m tcp --dport 32637 -j DNAT --to-destination [fd69::3]:32637 -A OVN-KUBE-ETP -d fd69::2/128 -p tcp -m tcp --dport 80 -j DNAT --to-destination [fd69::3]:30289 -A OVN-KUBE-ETP -d fd02::1:0/128 -p tcp -m tcp --dport 80 -j DNAT --to-destination [fd69::3]:30289 -A OVN-KUBE-ETP -d fd01:0:0:1::2/128 -p tcp -m tcp --dport 80 -j DNAT --to-destination [fd69::3]:30289 -A OVN-KUBE-ETP -d 2a05:d012:f0a:0:ad8e:a095:1f70:7a56/128 -p tcp -m tcp --dport 80 -j DNAT --to-destination [fd69::3]:30289 -A OVN-KUBE-ETP -p tcp -m addrtype --dst-type LOCAL -m tcp --dport 30289 -j DNAT --to-destination [fd69::3]:30289 -A OVN-KUBE-EXTERNALIP -d fd69::2/128 -p tcp -m tcp --dport 443 -j DNAT --to-destination [fd02::3e80]:443 -A OVN-KUBE-EXTERNALIP -d fd02::1:0/128 -p tcp -m tcp --dport 443 -j DNAT --to-destination [fd02::3e80]:443 -A OVN-KUBE-EXTERNALIP -d fd01:0:0:1::2/128 -p tcp -m tcp --dport 443 -j DNAT --to-destination [fd02::3e80]:443 -A OVN-KUBE-EXTERNALIP -d 2a05:d012:f0a:0:ad8e:a095:1f70:7a56/128 -p tcp -m tcp --dport 443 -j DNAT --to-destination [fd02::3e80]:443 -A OVN-KUBE-EXTERNALIP -d fd69::2/128 -p tcp -m tcp --dport 80 -j DNAT --to-destination [fd02::3e80]:80 -A OVN-KUBE-EXTERNALIP -d fd02::1:0/128 -p tcp -m tcp --dport 80 -j DNAT --to-destination [fd02::3e80]:80 -A OVN-KUBE-EXTERNALIP -d fd01:0:0:1::2/128 -p tcp -m tcp --dport 80 -j DNAT --to-destination [fd02::3e80]:80 -A OVN-KUBE-EXTERNALIP -d 2a05:d012:f0a:0:ad8e:a095:1f70:7a56/128 -p tcp -m tcp --dport 80 -j DNAT --to-destination [fd02::3e80]:80 -A OVN-KUBE-NODEPORT -p tcp -m addrtype --dst-type LOCAL -m tcp --dport 32637 -j DNAT --to-destination [fd02::3e80]:443 -A OVN-KUBE-NODEPORT -p tcp -m addrtype --dst-type LOCAL -m tcp --dport 30289 -j DNAT --to-destination [fd02::3e80]:80 -A OVN-KUBE-SNAT-MGMTPORT -p tcp -m tcp --dport 32637 -j RETURN -A OVN-KUBE-SNAT-MGMTPORT -p tcp -m tcp --dport 30289 -j RETURN -A OVN-KUBE-SNAT-MGMTPORT -o ovn-k8s-mp0 -m comment --comment "OVN SNAT to Management Port" -j SNAT --to-source fd01:0:0:1::2