Bug 1741499

Summary: [4.1] EgressIP doesn't work with NetworkPolicy unless traffic from default project is allowed
Product: OpenShift Container Platform Reporter: Dan Winship <danw>
Component: NetworkingAssignee: Dan Winship <danw>
Status: CLOSED ERRATA QA Contact: zhaozhanqi <zzhao>
Severity: low Docs Contact:
Priority: unspecified    
Version: 4.1.0CC: aos-bugs, csekar, danw, jdesousa, piqin, travi, zzhao
Target Milestone: ---   
Target Release: 4.1.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1700431 Environment:
Last Closed: 2019-09-10 15:59:27 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1700431    
Bug Blocks: 1741477, 1766583    

Comment 2 zhaozhanqi 2019-08-26 08:52:49 UTC
Verified this bug on 4.1.0-0.nightly-2019-08-25-164016

pod with in egress ip namespaces and networkpolicy (can only access by itself) can access the public internet

Comment 4 errata-xmlrpc 2019-09-10 15:59:27 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2019:2594