Bug 1949105 - NetworkPolicy ... should enforce ingress policy allowing any port traffic to a server on a specific protocol
Summary: NetworkPolicy ... should enforce ingress policy allowing any port traffic to ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Networking
Version: 4.8
Hardware: Unspecified
OS: Unspecified
low
low
Target Milestone: ---
: 4.8.0
Assignee: Mohamed Mahmoud
QA Contact: zhaozhanqi
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-04-13 12:53 UTC by Dan Winship
Modified: 2021-07-27 23:00 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-07-27 23:00:08 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift kubernetes pull 734 0 None open Bug 1949105: Renable NetworkPolicy test 2021-05-05 14:07:49 UTC
Red Hat Product Errata RHSA-2021:2438 0 None None None 2021-07-27 23:00:22 UTC

Description Dan Winship 2021-04-13 12:53:17 UTC
New e2e test in 4.8:

[sig-network] Netpol [LinuxOnly] NetworkPolicy between server and client should enforce ingress policy allowing any port traffic to a server on a specific protocol [Feature:NetworkPolicy] [Feature:UDP] [Suite:openshift/conformance/parallel] [Suite:k8s]

This tests that

  kind: NetworkPolicy
  apiVersion: networking/v1
  metadata:
    name: allow-tcp
  spec:
    podSelector: {}
    ingress:
    - ports:
      - protocol: TCP

works. ie, "allow ingress on all TCP ports but not UDP"

This is a dumb feature and we never bothered to implement it in either openshift-sdn or ovn-kubernetes but there's a test for it now and it's easy to fix so it's better to implement it than to keep skipping the test.

(This needs to be fixed in both openshift-sdn and ovn-kubernetes, and then the e2e skip rules will need to updated in openshift/origin (for ovn-kubernetes) and openshift/kubernetes (for openshift-sdn).)

Comment 4 errata-xmlrpc 2021-07-27 23:00:08 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:2438


Note You need to log in before you can comment on or make changes to this bug.