Bug 1998453

Summary: fix MCS blocking iptables rules
Product: OpenShift Container Platform Reporter: Arnab Ghosh <arghosh>
Component: NetworkingAssignee: Christoph Stäbler <cstabler>
Networking sub component: openshift-sdn QA Contact: Ying Wang <yingwang>
Status: CLOSED ERRATA Docs Contact:
Severity: high    
Priority: urgent CC: anbhat, bbennett, danw, dmunneor, ealcaniz, kholtz, kkulkarn, memodi, mmethot, rkhan, yingwang, zzhao
Version: 4.6.z   
Target Milestone: ---   
Target Release: 4.6.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1915027 Environment:
Last Closed: 2021-09-22 20:06:41 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1915027    
Bug Blocks: 1921274, 1937118    

Comment 4 Ying Wang 2021-09-15 06:41:44 UTC 

Verified on both ovn and sdn cluster, both work fine


bash-5.0# curl --local-port 22624 http://google.com/
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>301 Moved</TITLE></HEAD><BODY>
<H1>301 Moved</H1>
The document has moved
<A HREF="http://www.google.com/">here</A>.
</BODY></HTML>

bash-5.0# curl --local-port 22623 http://google.com/
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>301 Moved</TITLE></HEAD><BODY>
<H1>301 Moved</H1>
The document has moved
<A HREF="http://www.google.com/">here</A>.
</BODY></HTML>



% oc version
Client Version: 4.9.0-0.nightly-2021-08-18-144658
Server Version: 4.6.0-0.nightly-2021-09-13-181051
Kubernetes Version: v1.19.0+1cec875
Comment 7 errata-xmlrpc 2021-09-22 20:06:41 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.6.45 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2021:3517