Bug 1803193

Summary:	SG rules allow more traffic to master and worker nodes than should
Product:	OpenShift Container Platform	Reporter:	Maysa Macedo <mdemaced>
Component:	Networking	Assignee:	Maysa Macedo <mdemaced>
Networking sub component:	kuryr	QA Contact:	GenadiC <gcheresh>
Status:	CLOSED ERRATA	Docs Contact:
Severity:	medium
Priority:	unspecified	CC:	juriarte
Version:	4.4
Target Milestone:	---
Target Release:	4.4.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1832311 (view as bug list)		Environment:
Last Closed:	2020-05-04 11:36:59 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1832311

Description Maysa Macedo 2020-02-14 16:14:30 UTC

Description of problem:

The security group rules created on the Cluster Network Operator needs to be
revisited to ensure only the minimum required of ports is allowed whenever OSP13
or OSP16 is used with amphora or ovn-octavia providers.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 3 Jon Uriarte 2020-04-02 14:41:07 UTC

Verified on 4.4.0-0.nightly-2020-03-31-053841 on OSP 13 (2020-03-25.1) and OSP 16 (RHOS_TRUNK-16.0-RHEL-8-20200324.n.0).

The K8s NP tests results and conformance tests results are the expected ones.
We filed 2 BZs [*] during this verification as there were some issues but not related to this BZ.

[*]
https://bugzilla.redhat.com/show_bug.cgi?id=1818066
https://bugzilla.redhat.com/show_bug.cgi?id=1820118

Comment 5 errata-xmlrpc 2020-05-04 11:36:59 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0581