Bug 1564984
| Summary: | Rejected by router when using router sharding and NAMESPACE_LABELS | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Simon Reber <sreber> |
| Component: | Networking | Assignee: | Ram Ranganathan <ramr> |
| Networking sub component: | router | QA Contact: | zhaozhanqi <zzhao> |
| Status: | CLOSED ERRATA | Docs Contact: | |
| Severity: | medium | ||
| Priority: | high | CC: | bbennett |
| Version: | 3.6.1 | ||
| Target Milestone: | --- | ||
| Target Release: | 3.10.0 | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-07-30 19:12:20 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Simon Reber
2018-04-09 06:18:16 UTC
this steps 1. update router oc env dc router NAMESPACE_LABELS=team=red ROUTER_ALLOWED_DOMAINS=test.zzhao.com 2. create some route with user1, and check the routes hostname are corrrect $ oc get route NAME HOST/PORT PATH SERVICES PORT TERMINATION WILDCARD edge1 header.edge.example.com header-test-insecure http edge None edge32 32header.edge.example.com header-test-insecure http edge None 3. Add label for the namespace team=red using admin user oc label namespace z1 team=red 4. Check all routes again $ oc get route NAME HOST/PORT PATH SERVICES PORT TERMINATION WILDCARD edge1 RouteNotAdmitted header-test-insecure http edge None edge32 RouteNotAdmitted header-test-insecure http edge None 5. Modified the namespace label to team=blue oc label namespace z1 team=blue 6. Check all routes again, the route hostname still 'RouteNotAdmitted' $ oc get route NAME HOST/PORT PATH SERVICES PORT TERMINATION WILDCARD edge1 RouteNotAdmitted header-test-insecure http edge None edge32 RouteNotAdmitted header-test-insecure http edge None sorry forget to added the tested version # oc version oc v3.10.0-0.47.0 kubernetes v1.10.0+b81c8f8 features: Basic-Auth GSSAPI Kerberos SPNEGO Server https://ip-172-18-10-50.ec2.internal:8443 When you change the label so that the sharded router no longer sees it, nothing cleans up the status. Please see https://docs.openshift.com/container-platform/3.4/architecture/core_concepts/routes.html#route-status-field According to comment 6, when using ./clear-route-status.sh z1 ALL this routes will be back. Verified this bug . Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2018:1816 |