Bug 1686025 - [3.11] Network Policy Plugin does not clean up flows from deleted namespaces
Summary: [3.11] Network Policy Plugin does not clean up flows from deleted namespaces
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Networking
Version: 3.11.0
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
: 3.11.z
Assignee: Dan Winship
QA Contact: zhaozhanqi
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-03-06 15:02 UTC by Dan Winship
Modified: 2019-07-09 07:53 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: Multiple bugs Consequence: When deleting a Namespace that contained NetworkPolicies, some of the OVS rules pertaining to those NetworkPolicies did not get cleaned up. While these rules were harmless in themselves (they wouldn't cause any packets to be mistakenly accepted or rejected), it is possible that the build-up of junk rules might have eventually caused slowdowns. (But note that we are not aware of any customers actually experiencing problems because of this at this time.) Fix: All OVS flows associated with a Namespace should now be deleted properly when that Namespace is deleted. Result: No problems
Clone Of: 1682955
Environment:
Last Closed: 2019-06-06 02:00:28 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift origin pull 22443 0 'None' 'closed' '[3.11] Fix up VNID tracking on restart / delete unused NetworkPolicy flows' 2019-12-05 09:06:00 UTC
Red Hat Product Errata RHBA-2019:0794 0 None None None 2019-06-06 02:00:41 UTC

Comment 1 Dan Winship 2019-03-06 15:06:43 UTC 
https://github.com/openshift/origin/pull/22251
Comment 5 Dan Winship 2019-03-14 15:40:39 UTC 
This is being reverted from 3.11 and earlier. Note that while stale OVS flows may build up at times, there is already a periodic job that eventually cleans them up.
Comment 7 Dan Winship 2019-04-01 13:40:41 UTC 
https://github.com/openshift/origin/pull/22443
Comment 11 errata-xmlrpc 2019-06-06 02:00:28 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:0794
Note You need to log in before you can comment on or make changes to this bug.