Comments (3)
Thanks for reporting this. It's not always the same subtest failing as far as I can tell, but I keep experiencing this issue with the Jenkins job.
from antrea.
It seems to be consistently failing specially for destination pod as vlan IPAM pod with src pod selector configuration.
from antrea.
apiVersion: crd.antrea.io/v1beta1
kind: ClusterNetworkPolicy
metadata:
name: acnp-with-drop-a
spec:
priority: 1
appliedTo:
- podSelector:
matchLabels:
pod: a
ingress:- action: Drop
from:- podSelector: {}
enableLogging: true
wrt applied ingress drop policy , NAT is done when sending traffic from non vlan pod to vlan pod due to iptables rules added during docker bridge creation.
connntrack log shows the src ip being changed due to iptable rules
ovs-appctl dpctl/dump-conntrack
tcp,orig=(src=192.168.241.1,dst=192.168.241.100,sport=40800,dport=80),reply=(src=192.168.241.100,dst=192.168.241.1,sport=80,dport=40800),zone=4107,mark=4,protoinfo=(state=TIME_WAIT)
after removing iptable rules in kind test bed, ingress policy drop tests have passed
from antrea.
Related Issues (20)
- Add e2e tests for the NodeLatencyMonitor feature HOT 5
- More uniform BGP router ID selection for IPv4 and IPv6 HOT 4
- Add documentation for NodeLatencyMonitor HOT 2
- After moving host interface to the secondary OVS bridge the host lost DNS config
- Investigate using Docker Bake to build Antrea image chain
- Install-OVS.ps1 fails on systems localized to anything but English HOT 4
- antctl check cluster tries to pull wrong tag HOT 4
- Add BGP Confederation support HOT 4
- Running antrea on a windows node gets stuck while waiting for data path HOT 9
- `creationTimestamp` field is always `null` in `NodeLatencyStats` HOT 1
- Decouple the sending of probes from the latency reporting in the NodeLatencyMonitor
- `NodeLatencyStats` API should use `metav1.MicroTime` instead of `metav1.Time` for send / receive timestamps
- SecondaryNetwork OVS ports cannot be deleted correctly after an Agent restart
- ExternalIPPool IPRanges cidr does not allow network/broadcast address to be used HOT 1
- Antrea Longevity Test for sustained performance while maintaining its functionality and stability over an extended period
- Support multiple Egress IPs per Egress
- Add support for Traffic Distribution in AntreaProxy HOT 1
- Antrea Traceflow should validate that destination port isn't empty when destination is a K8s Service HOT 1
- `antctl check cluster` doesn't work on OpenShift cluster
- Support SCTP Protocol in Antrea Traceflow
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from antrea.