Bug 2059639
Summary: | [OVN] Openshift-dns service is created with internal traffic policy cluster and OVN used DNS service instead of local endpoint | ||
---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Andre Costa <andcosta> |
Component: | Networking | Assignee: | Miciah Dashiel Butler Masters <mmasters> |
Networking sub component: | DNS | QA Contact: | Hongan Li <hongli> |
Status: | CLOSED DUPLICATE | Docs Contact: | |
Severity: | medium | ||
Priority: | medium | CC: | aos-bugs, mmasters |
Version: | 4.9 | ||
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2022-03-01 16:45:23 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Andre Costa
2022-03-01 15:30:28 UTC
Setting blocker- as this doesn't appear to be a regression, upgrade issue, or otherwise something that should block a release. This issue appears to be related to bug 1919737, which we fixed with a patch to openshift-sdn. This new BZ is about addressing the same issue in OVN-Kubernetes. The spec.internalTrafficPolicy API field is relatively new; "internalTrafficPolicy: Cluster" is the default the API sets. The DNS operator isn't explicitly setting internalTrafficPolicy. The Kubernetes documentation is contradictory as to when "internalTrafficPolicy" was enabled by default (<https://kubernetes.io/docs/concepts/services-networking/service-traffic-policy/> says Kubernetes 1.23, and <https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md> says Kubernetes 1.22). The field seems to be present in Kubernetes 1.22 (as evidenced by bug 2002461), so we can set "internalTrafficPolicy: Local" in OpenShift 4.9 (which is based on Kubernetes 1.22; see <https://access.redhat.com/solutions/4870701>) and later. I'll check with the SDN team to see whether specifying "internalTrafficPolicy: Local" works or could break anything with openshift-sdn and OVN-Kubernetes. Surya from the SDN team reminded me about bug 2039698 (and 4.9.z backport bug 2055317), which adds a fix in OVN-Kubernetes similar to the one in openshift-sdn. Surya also reminded me that "internalTrafficPolicy: Local" is not really what we need for the DNS service; we need the service to *prefer* a local endpoint and fall back to any available endpoint if no local endpoint is available. There is work upstream to add "internalTrafficPolicy: PreferLocal" (see <https://github.com/kubernetes/enhancements/pull/3016>), but right now, "internalTrafficPolicy" does not fit our needs. I'm closing this report as a duplicate of bug 2055317; please let me know if I have misunderstood the request in this BZ. *** This bug has been marked as a duplicate of bug 2055317 *** |