Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Source pod ip is not preserved when contacting a cluster ip service #11042

Closed
marun opened this issue Sep 21, 2016 · 5 comments
Closed

Source pod ip is not preserved when contacting a cluster ip service #11042

marun opened this issue Sep 21, 2016 · 5 comments
Assignees
Labels
area/techdebt component/networking lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. priority/P3

Comments

@marun
Copy link
Contributor

marun commented Sep 21, 2016

A kube e2e test was added to validate preservation of the pod source ip when contacting a service:

kubernetes/kubernetes#30739

This test currently fails when run against origin. According to @danwinship, this is due to docker adding a rule ensuring that anything with a source IP in lbr0's network and destination IP outside of lbr0's network is masqueraded. The result is that a pod IP (e.g. x.x.x.5) would appear to the service ip as the lbr0 gateway (e.g. x.x.x.1).

The e2e in question will be skipped until this issue is resolved.

cc: @openshift/networking

@openshift-bot
Copy link
Contributor

Issues go stale after 90d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle stale

@openshift-ci-robot openshift-ci-robot added the lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. label Feb 7, 2018
@openshift-bot
Copy link
Contributor

Stale issues rot after 30d of inactivity.

Mark the issue as fresh by commenting /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
Exclude this issue from closing by commenting /lifecycle frozen.

If this issue is safe to close now please do so with /close.

/lifecycle rotten
/remove-lifecycle stale

@openshift-ci-robot openshift-ci-robot added lifecycle/rotten Denotes an issue or PR that has aged beyond stale and will be auto-closed. and removed lifecycle/stale Denotes an issue or PR has remained open with no activity and has become stale. labels Mar 10, 2018
@danwinship
Copy link
Contributor

Not clear if we're going to fix this before migrating everyone to OVN, but we don't want the issue auto-closed

/remove-lifecycle rotten
/lifecycle frozen

@openshift-ci-robot openshift-ci-robot added lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. and removed lifecycle/rotten Denotes an issue or PR that has aged beyond stale and will be auto-closed. labels Mar 12, 2018
@danwinship
Copy link
Contributor

This works for ovs-networkpolicy, and is not going to be fixed for ovs-multitenant.
/close

@openshift-ci-robot
Copy link

@danwinship: Closing this issue.

In response to this:

This works for ovs-networkpolicy, and is not going to be fixed for ovs-multitenant.
/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/techdebt component/networking lifecycle/frozen Indicates that an issue or PR should not be auto-closed due to staleness. priority/P3
Projects
None yet
Development

No branches or pull requests

4 participants