Bug 1877065

Summary: Whereabouts IPAM CNI IPv6 addresses with single colon aren't properly converted to DNS-1123 name in OCP 4.5
Product: OpenShift Container Platform Reporter: Douglas Smith <dosmith>
Component: NetworkingAssignee: Douglas Smith <dosmith>
Networking sub component: multus QA Contact: Weibin Liang <weliang>
Status: CLOSED ERRATA Docs Contact:
Severity: high    
Priority: high CC: weliang
Version: 4.5   
Target Milestone: ---   
Target Release: 4.5.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1877060 Environment:
Last Closed: 2020-09-21 17:42:06 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1877060    
Bug Blocks:    

Comment 3 Weibin Liang 2020-09-14 19:30:39 UTC
In 4.5.0-0.nightly-2020-09-14-124053, pod can get more ipv6 address than the range defined in NAD,

[weliang@weliang verification-tests]$ oc get net-attach-def macvlan-bridge-whereabouts-v6 -o yaml
apiVersion: k8s.cni.cncf.io/v1
kind: NetworkAttachmentDefinition
metadata:
  creationTimestamp: "2020-09-14T17:48:02Z"
  generation: 1
  managedFields:
  - apiVersion: k8s.cni.cncf.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        .: {}
        f:config: {}
    manager: oc
    operation: Update
    time: "2020-09-14T17:48:02Z"
  name: macvlan-bridge-whereabouts-v6
  namespace: test1
  resourceVersion: "27646"
  selfLink: /apis/k8s.cni.cncf.io/v1/namespaces/test1/network-attachment-definitions/macvlan-bridge-whereabouts-v6
  uid: 84a0cd83-53a1-4d25-be00-0e53ee380eca
spec:
  config: '{ "cniVersion": "0.3.0", "name": "whereabouts", "type": "macvlan", "mode":
    "bridge", "ipam": { "type": "whereabouts", "range": "fd00:dead:beef:1::1-fd00:dead:beef:1::4/64"
    } }'
[weliang@weliang verification-tests]$ 
[weliang@weliang verification-tests]$ oc get pods
NAME                  READY   STATUS    RESTARTS   AGE
whereabouts-podv6-1   1/1     Running   0          26s
whereabouts-podv6-2   1/1     Running   0          25s
whereabouts-podv6-3   1/1     Running   0          24s
whereabouts-podv6-4   1/1     Running   0          24s
whereabouts-podv6-5   1/1     Running   0          23s
[weliang@weliang verification-tests]$ oc describe pod | grep fd00
                        "fd00:dead:beef:1::1"
                        "fd00:dead:beef:1::1"
  Normal  AddedInterface  48s        multus                                              Add net1 [fd00:dead:beef:1::1/64] from macvlan-bridge-whereabouts-v6
                        "fd00:dead:beef:1::2"
                        "fd00:dead:beef:1::2"
  Normal  AddedInterface  48s        multus                                              Add net1 [fd00:dead:beef:1::2/64] from macvlan-bridge-whereabouts-v6
                        "fd00:dead:beef:1::3"
                        "fd00:dead:beef:1::3"
  Normal  AddedInterface  47s        multus                                              Add net1 [fd00:dead:beef:1::3/64] from macvlan-bridge-whereabouts-v6
                        "fd00:dead:beef:1::4"
                        "fd00:dead:beef:1::4"
  Normal  AddedInterface  48s        multus                                              Add net1 [fd00:dead:beef:1::4/64] from macvlan-bridge-whereabouts-v6
                        "fd00:dead:beef:1::5"
                        "fd00:dead:beef:1::5"
  Normal  AddedInterface  48s        multus                                              Add net1 [fd00:dead:beef:1::5/64] from macvlan-bridge-whereabouts-v6
[weliang@weliang verification-tests]$

Comment 5 errata-xmlrpc 2020-09-21 17:42:06 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.5.11 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:3719