Skip to content

Pods created shortly before cilium-agent restart may have their connectivity broken upon agent restart #10337

@joestringer

Description

@joestringer

User reports the following sequence of events:

  • Cilium starts up
  • A new pod is created
  • Cilium creates the endpoint
  • Cilium fails to compile the endpoint (-ENOMEM)
  • Cilium rewrites the BPF program Rewrote endpoint BPF program log message
  • Cilium is able to rewrite the endpoint program and log Successful endpoint creation
  • Cilium rewrites the BPF program again Rewrote endpoint BPF program log message
  • Cilium restarts shortly (1 second) later
  • New cilium starts up, and tries to restore the endpoint
  • C header cannot be found: "C header file not found. Ignoring endpoint"
  • Endpoint is ignored.

The pod then fails to connect anywhere. tcpdump on the lxc..... device shows unreplied ARP.

Metadata

Metadata

Assignees

Labels

kind/bugThis is a bug in the Cilium logic.kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.priority/highThis is considered vital to an upcoming release.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions