Skip to content

CI: K8sDatapathConfig Host firewall With native routing and endpoint routes #24700

New issue
New issue
Closed as not planned
Closed as not planned
CI: K8sDatapathConfig Host firewall With native routing and endpoint routes#24700
Labels
ci/flakeThis is a known failure that occurs in the tree. Please investigate me!staleThe stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale.
@maintainer-s-little-helper

Description

@maintainer-s-little-helper
maintainer-s-little-helper
bot
opened on Apr 3, 2023

Test Name

K8sDatapathConfig Host firewall With native routing and endpoint routes

Failure Output

FAIL: cilium pre-flight checks failed

Stacktrace

Click to show. 
/home/jenkins/workspace/Cilium-PR-K8s-1.24-kernel-5.4/src/github.com/cilium/cilium/test/ginkgo-ext/scopes.go:515
cilium pre-flight checks failed
Expected
    <*errors.errorString | 0xc0030f2130>: {
        s: "Cilium validation failed: 4m0s timeout expired: Last polled error: connectivity health is failing: cilium-agent 'cilium-2dgx4': connectivity to path 'k8s2.host.primary-address.icmp.status' is unhealthy: 'Connection timed out'",
    }
to be nil
/home/jenkins/workspace/Cilium-PR-K8s-1.24-kernel-5.4/src/github.com/cilium/cilium/test/helpers/manifest.go:305

Standard Output

Click to show. 
Number of "context deadline exceeded" in logs: 0
Number of "level=error" in logs: 0
Number of "level=warning" in logs: 0
Number of "Cilium API handler panicked" in logs: 0
Number of "Goroutine took lock for more than" in logs: 0
No errors/warnings found in logs
Number of "context deadline exceeded" in logs: 0
Number of "level=error" in logs: 0
Number of "level=warning" in logs: 0
Number of "Cilium API handler panicked" in logs: 0
Number of "Goroutine took lock for more than" in logs: 0
No errors/warnings found in logs
Number of "context deadline exceeded" in logs: 0
Number of "level=error" in logs: 0
⚠️  Number of "level=warning" in logs: 6
Number of "Cilium API handler panicked" in logs: 0
Number of "Goroutine took lock for more than" in logs: 0
Top 3 errors/warnings:
Disabling socket-LB tracing as it requires kernel 5.7 or newer
Session affinity for host reachable services needs kernel 5.7.0 or newer to work properly when accessed from inside cluster: the same service endpoint will be selected from all network namespaces on the host.
UpdateIdentities: Skipping Delete of a non-existing identity
Cilium pods: [cilium-2dgx4 cilium-pfdvx]
Netpols loaded: 
CiliumNetworkPolicies loaded: 
Endpoint Policy Enforcement:
Pod                        Ingress   Egress
coredns-6b775575b5-sz5zr   false     false
Cilium agent 'cilium-2dgx4': Status: Ok  Health: Ok Nodes "" ContainerRuntime:  Kubernetes: Ok KVstore: Ok Controllers: Total 21 Failed 0
Cilium agent 'cilium-pfdvx': Status: Ok  Health: Ok Nodes "" ContainerRuntime:  Kubernetes: Ok KVstore: Ok Controllers: Total 25 Failed 0

Standard Error

Click to show. 
08:58:51 STEP: Installing Cilium
08:58:53 STEP: Waiting for Cilium to become ready
08:59:09 STEP: Validating if Kubernetes DNS is deployed
08:59:09 STEP: Checking if deployment is ready
08:59:09 STEP: Checking if kube-dns service is plumbed correctly
08:59:09 STEP: Checking if pods have identity
08:59:09 STEP: Checking if DNS can resolve
08:59:13 STEP: Kubernetes DNS is not ready: %!s(<nil>)
08:59:13 STEP: Restarting Kubernetes DNS (-l k8s-app=kube-dns)
08:59:14 STEP: Waiting for Kubernetes DNS to become operational
08:59:14 STEP: Checking if deployment is ready
08:59:14 STEP: Kubernetes DNS is not ready yet: only 0 of 1 replicas are available
08:59:15 STEP: Checking if deployment is ready
08:59:15 STEP: Kubernetes DNS is not ready yet: only 0 of 1 replicas are available
08:59:16 STEP: Checking if deployment is ready
08:59:16 STEP: Kubernetes DNS is not ready yet: only 0 of 1 replicas are available
08:59:17 STEP: Checking if deployment is ready
08:59:17 STEP: Checking if kube-dns service is plumbed correctly
08:59:17 STEP: Checking if pods have identity
08:59:17 STEP: Checking if DNS can resolve
08:59:20 STEP: Validating Cilium Installation
08:59:20 STEP: Performing Cilium controllers preflight check
08:59:20 STEP: Performing Cilium status preflight check
08:59:20 STEP: Performing Cilium health check
08:59:20 STEP: Checking whether host EP regenerated
08:59:28 STEP: Performing Cilium service preflight check
08:59:28 STEP: Performing K8s service preflight check
08:59:28 STEP: Cilium is not ready yet: connectivity health is failing: Cluster connectivity is unhealthy on 'cilium-2dgx4': Exitcode: 1 
Err: exit status 1
Stdout:
 	 
Stderr:
 	 Defaulted container "cilium-agent" out of: cilium-agent, config (init), mount-cgroup (init), apply-sysctl-overwrites (init), mount-bpf-fs (init), clean-cilium-state (init), install-cni-binaries (init)
	 Error: Cannot get status/probe: Put "http://%2Fvar%2Frun%2Fcilium%2Fhealth.sock/v1beta/status/probe": dial unix /var/run/cilium/health.sock: connect: no such file or directory
	 
	 command terminated with exit code 1
	 

08:59:28 STEP: Performing Cilium controllers preflight check
08:59:28 STEP: Performing Cilium health check
08:59:28 STEP: Checking whether host EP regenerated
08:59:28 STEP: Performing Cilium status preflight check
08:59:35 STEP: Performing Cilium service preflight check
08:59:35 STEP: Performing K8s service preflight check
08:59:35 STEP: Cilium is not ready yet: connectivity health is failing: cilium-agent 'cilium-2dgx4': connectivity to path 'k8s2.host.primary-address.icmp.status' is unhealthy: 'Connection timed out'
08:59:35 STEP: Performing Cilium controllers preflight check
08:59:35 STEP: Performing Cilium status preflight check
08:59:35 STEP: Performing Cilium health check
08:59:35 STEP: Checking whether host EP regenerated
08:59:42 STEP: Performing Cilium service preflight check
08:59:42 STEP: Performing K8s service preflight check
08:59:42 STEP: Performing Cilium controllers preflight check
08:59:42 STEP: Performing Cilium health check
08:59:42 STEP: Performing Cilium status preflight check
08:59:42 STEP: Checking whether host EP regenerated
08:59:49 STEP: Performing Cilium service preflight check
08:59:49 STEP: Performing K8s service preflight check
08:59:49 STEP: Performing Cilium controllers preflight check
08:59:49 STEP: Performing Cilium health check
08:59:49 STEP: Performing Cilium status preflight check
08:59:49 STEP: Checking whether host EP regenerated
08:59:55 STEP: Performing Cilium service preflight check
08:59:55 STEP: Performing K8s service preflight check
08:59:55 STEP: Performing Cilium controllers preflight check
08:59:55 STEP: Performing Cilium status preflight check
08:59:55 STEP: Performing Cilium health check
08:59:55 STEP: Checking whether host EP regenerated
09:00:02 STEP: Performing Cilium service preflight check
09:00:02 STEP: Performing K8s service preflight check
09:00:02 STEP: Performing Cilium controllers preflight check
09:00:02 STEP: Performing Cilium status preflight check
09:00:02 STEP: Performing Cilium health check
09:00:02 STEP: Checking whether host EP regenerated
09:00:09 STEP: Performing Cilium service preflight check
09:00:09 STEP: Performing K8s service preflight check
09:00:09 STEP: Performing Cilium controllers preflight check
09:00:09 STEP: Checking whether host EP regenerated
09:00:09 STEP: Performing Cilium status preflight check
09:00:09 STEP: Performing Cilium health check
09:00:16 STEP: Performing Cilium service preflight check
09:00:16 STEP: Performing K8s service preflight check
09:00:16 STEP: Cilium is not ready yet: connectivity health is failing: cilium-agent 'cilium-2dgx4': connectivity to path 'k8s2.host.primary-address.icmp.status' is unhealthy: 'Connection timed out'
09:00:16 STEP: Performing Cilium controllers preflight check
09:00:16 STEP: Performing Cilium health check
09:00:16 STEP: Performing Cilium status preflight check
09:00:16 STEP: Checking whether host EP regenerated
09:00:23 STEP: Performing Cilium service preflight check
09:00:23 STEP: Performing K8s service preflight check
09:00:23 STEP: Performing Cilium controllers preflight check
09:00:23 STEP: Performing Cilium health check
09:00:23 STEP: Performing Cilium status preflight check
09:00:23 STEP: Checking whether host EP regenerated
09:00:30 STEP: Performing Cilium service preflight check
09:00:30 STEP: Performing K8s service preflight check
09:00:30 STEP: Performing Cilium controllers preflight check
09:00:30 STEP: Performing Cilium status preflight check
09:00:30 STEP: Performing Cilium health check
09:00:30 STEP: Checking whether host EP regenerated
09:00:37 STEP: Performing Cilium service preflight check
09:00:37 STEP: Performing K8s service preflight check
09:00:37 STEP: Performing Cilium controllers preflight check
09:00:37 STEP: Checking whether host EP regenerated
09:00:37 STEP: Performing Cilium health check
09:00:37 STEP: Performing Cilium status preflight check
09:00:44 STEP: Performing Cilium service preflight check
09:00:44 STEP: Performing K8s service preflight check
09:00:44 STEP: Performing Cilium controllers preflight check
09:00:44 STEP: Performing Cilium health check
09:00:44 STEP: Checking whether host EP regenerated
09:00:44 STEP: Performing Cilium status preflight check
09:00:51 STEP: Performing Cilium service preflight check
09:00:51 STEP: Performing K8s service preflight check
09:00:51 STEP: Performing Cilium controllers preflight check
09:00:51 STEP: Performing Cilium health check
09:00:51 STEP: Checking whether host EP regenerated
09:00:51 STEP: Performing Cilium status preflight check
09:00:58 STEP: Performing Cilium service preflight check
09:00:58 STEP: Performing K8s service preflight check
09:00:58 STEP: Cilium is not ready yet: connectivity health is failing: cilium-agent 'cilium-2dgx4': connectivity to path 'k8s2.host.primary-address.icmp.status' is unhealthy: 'Connection timed out'
09:00:58 STEP: Performing Cilium controllers preflight check
09:00:58 STEP: Performing Cilium status preflight check
09:00:58 STEP: Performing Cilium health check
09:00:58 STEP: Checking whether host EP regenerated
09:01:05 STEP: Performing Cilium service preflight check
09:01:05 STEP: Performing K8s service preflight check
09:01:05 STEP: Performing Cilium status preflight check
09:01:05 STEP: Performing Cilium health check
09:01:05 STEP: Checking whether host EP regenerated
09:01:05 STEP: Performing Cilium controllers preflight check
09:01:12 STEP: Performing Cilium service preflight check
09:01:12 STEP: Performing K8s service preflight check
09:01:12 STEP: Performing Cilium controllers preflight check
09:01:12 STEP: Performing Cilium status preflight check
09:01:12 STEP: Performing Cilium health check
09:01:12 STEP: Checking whether host EP regenerated
09:01:18 STEP: Performing Cilium service preflight check
09:01:18 STEP: Performing K8s service preflight check
09:01:18 STEP: Performing Cilium controllers preflight check
09:01:18 STEP: Performing Cilium status preflight check
09:01:18 STEP: Performing Cilium health check
09:01:18 STEP: Checking whether host EP regenerated
09:01:25 STEP: Performing Cilium service preflight check
09:01:25 STEP: Performing K8s service preflight check
09:01:25 STEP: Performing Cilium controllers preflight check
09:01:25 STEP: Performing Cilium status preflight check
09:01:25 STEP: Performing Cilium health check
09:01:25 STEP: Checking whether host EP regenerated
09:01:32 STEP: Performing Cilium service preflight check
09:01:32 STEP: Performing K8s service preflight check
09:01:32 STEP: Performing Cilium controllers preflight check
09:01:32 STEP: Performing Cilium status preflight check
09:01:32 STEP: Performing Cilium health check
09:01:32 STEP: Checking whether host EP regenerated
09:01:39 STEP: Performing Cilium service preflight check
09:01:39 STEP: Performing K8s service preflight check
09:01:39 STEP: Cilium is not ready yet: connectivity health is failing: cilium-agent 'cilium-2dgx4': connectivity to path 'k8s2.host.primary-address.icmp.status' is unhealthy: 'Connection timed out'
09:01:39 STEP: Performing Cilium controllers preflight check
09:01:39 STEP: Performing Cilium status preflight check
09:01:39 STEP: Performing Cilium health check
09:01:39 STEP: Checking whether host EP regenerated
09:01:46 STEP: Performing Cilium service preflight check
09:01:46 STEP: Performing K8s service preflight check
09:01:46 STEP: Performing Cilium controllers preflight check
09:01:46 STEP: Performing Cilium status preflight check
09:01:46 STEP: Performing Cilium health check
09:01:46 STEP: Checking whether host EP regenerated
09:01:53 STEP: Performing Cilium service preflight check
09:01:53 STEP: Performing K8s service preflight check
09:01:53 STEP: Performing Cilium controllers preflight check
09:01:53 STEP: Performing Cilium status preflight check
09:01:53 STEP: Performing Cilium health check
09:01:53 STEP: Checking whether host EP regenerated
09:02:00 STEP: Performing Cilium service preflight check
09:02:00 STEP: Performing K8s service preflight check
09:02:00 STEP: Performing Cilium controllers preflight check
09:02:00 STEP: Performing Cilium health check
09:02:00 STEP: Checking whether host EP regenerated
09:02:00 STEP: Performing Cilium status preflight check
09:02:07 STEP: Performing Cilium service preflight check
09:02:07 STEP: Performing K8s service preflight check
09:02:07 STEP: Performing Cilium controllers preflight check
09:02:07 STEP: Performing Cilium health check
09:02:07 STEP: Checking whether host EP regenerated
09:02:07 STEP: Performing Cilium status preflight check
09:02:14 STEP: Performing Cilium service preflight check
09:02:14 STEP: Performing K8s service preflight check
09:02:14 STEP: Performing Cilium controllers preflight check
09:02:14 STEP: Performing Cilium health check
09:02:14 STEP: Performing Cilium status preflight check
09:02:14 STEP: Checking whether host EP regenerated
09:02:21 STEP: Performing Cilium service preflight check
09:02:21 STEP: Performing K8s service preflight check
09:02:21 STEP: Cilium is not ready yet: connectivity health is failing: cilium-agent 'cilium-2dgx4': connectivity to path 'k8s2.host.primary-address.icmp.status' is unhealthy: 'Connection timed out'
09:02:21 STEP: Performing Cilium controllers preflight check
09:02:21 STEP: Performing Cilium health check
09:02:21 STEP: Performing Cilium status preflight check
09:02:21 STEP: Checking whether host EP regenerated
09:02:28 STEP: Performing Cilium service preflight check
09:02:28 STEP: Performing K8s service preflight check
09:02:28 STEP: Performing Cilium controllers preflight check
09:02:28 STEP: Performing Cilium health check
09:02:28 STEP: Checking whether host EP regenerated
09:02:28 STEP: Performing Cilium status preflight check
09:02:35 STEP: Performing Cilium service preflight check
09:02:35 STEP: Performing K8s service preflight check
09:02:35 STEP: Performing Cilium controllers preflight check
09:02:35 STEP: Performing Cilium health check
09:02:35 STEP: Checking whether host EP regenerated
09:02:35 STEP: Performing Cilium status preflight check
09:02:42 STEP: Performing Cilium service preflight check
09:02:42 STEP: Performing K8s service preflight check
09:02:42 STEP: Performing Cilium status preflight check
09:02:42 STEP: Performing Cilium health check
09:02:42 STEP: Checking whether host EP regenerated
09:02:42 STEP: Performing Cilium controllers preflight check
09:02:48 STEP: Performing Cilium service preflight check
09:02:48 STEP: Performing K8s service preflight check
09:02:48 STEP: Performing Cilium controllers preflight check
09:02:48 STEP: Performing Cilium status preflight check
09:02:48 STEP: Performing Cilium health check
09:02:48 STEP: Checking whether host EP regenerated
09:02:55 STEP: Performing Cilium service preflight check
09:02:55 STEP: Performing K8s service preflight check
09:02:55 STEP: Performing Cilium controllers preflight check
09:02:55 STEP: Performing Cilium health check
09:02:55 STEP: Performing Cilium status preflight check
09:02:55 STEP: Checking whether host EP regenerated
09:03:02 STEP: Performing Cilium service preflight check
09:03:02 STEP: Performing K8s service preflight check
09:03:05 STEP: Cilium is not ready yet: connectivity health is failing: cilium-agent 'cilium-2dgx4': connectivity to path 'k8s2.host.primary-address.icmp.status' is unhealthy: 'Connection timed out'
09:03:05 STEP: Performing Cilium status preflight check
09:03:05 STEP: Performing Cilium controllers preflight check
09:03:05 STEP: Performing Cilium health check
09:03:05 STEP: Checking whether host EP regenerated
09:03:12 STEP: Performing Cilium service preflight check
09:03:12 STEP: Performing K8s service preflight check
09:03:12 STEP: Performing Cilium controllers preflight check
09:03:12 STEP: Performing Cilium status preflight check
09:03:12 STEP: Performing Cilium health check
09:03:12 STEP: Checking whether host EP regenerated
09:03:19 STEP: Performing Cilium service preflight check
09:03:19 STEP: Performing K8s service preflight check
09:03:19 STEP: Performing Cilium controllers preflight check
09:03:19 STEP: Performing Cilium health check
09:03:19 STEP: Checking whether host EP regenerated
09:03:19 STEP: Performing Cilium status preflight check
FAIL: cilium pre-flight checks failed
Expected
    <*errors.errorString | 0xc0030f2130>: {
        s: "Cilium validation failed: 4m0s timeout expired: Last polled error: connectivity health is failing: cilium-agent 'cilium-2dgx4': connectivity to path 'k8s2.host.primary-address.icmp.status' is unhealthy: 'Connection timed out'",
    }
to be nil
=== Test Finished at 2023-04-03T09:03:20Z====
09:03:20 STEP: Running JustAfterEach block for EntireTestsuite K8sDatapathConfig
===================== TEST FAILED =====================
09:03:21 STEP: Running AfterFailed block for EntireTestsuite K8sDatapathConfig
cmd: kubectl get pods -o wide --all-namespaces
Exitcode: 0 
Stdout:
 	 NAMESPACE           NAME                               READY   STATUS    RESTARTS   AGE     IP              NODE   NOMINATED NODE   READINESS GATES
	 cilium-monitoring   grafana-84476dcf4b-fz4bg           0/1     Running   0          42m     10.0.0.198      k8s1   <none>           <none>
	 cilium-monitoring   prometheus-7dbb447479-d27j8        1/1     Running   0          42m     10.0.0.184      k8s1   <none>           <none>
	 kube-system         cilium-2dgx4                       1/1     Running   0          4m33s   192.168.56.11   k8s1   <none>           <none>
	 kube-system         cilium-operator-6574d4888c-jq2bb   1/1     Running   0          4m33s   192.168.56.11   k8s1   <none>           <none>
	 kube-system         cilium-operator-6574d4888c-qff74   1/1     Running   0          4m33s   192.168.56.12   k8s2   <none>           <none>
	 kube-system         cilium-pfdvx                       1/1     Running   0          4m33s   192.168.56.12   k8s2   <none>           <none>
	 kube-system         coredns-6b775575b5-sz5zr           1/1     Running   0          4m12s   10.0.1.123      k8s2   <none>           <none>
	 kube-system         etcd-k8s1                          1/1     Running   0          47m     192.168.56.11   k8s1   <none>           <none>
	 kube-system         kube-apiserver-k8s1                1/1     Running   0          47m     192.168.56.11   k8s1   <none>           <none>
	 kube-system         kube-controller-manager-k8s1       1/1     Running   0          47m     192.168.56.11   k8s1   <none>           <none>
	 kube-system         kube-proxy-vmlzl                   1/1     Running   0          43m     192.168.56.12   k8s2   <none>           <none>
	 kube-system         kube-proxy-xvhrb                   1/1     Running   0          47m     192.168.56.11   k8s1   <none>           <none>
	 kube-system         kube-scheduler-k8s1                1/1     Running   0          47m     192.168.56.11   k8s1   <none>           <none>
	 kube-system         log-gatherer-mdjx9                 1/1     Running   0          42m     192.168.56.11   k8s1   <none>           <none>
	 kube-system         log-gatherer-sztmv                 1/1     Running   0          42m     192.168.56.12   k8s2   <none>           <none>
	 kube-system         registry-adder-njmd9               1/1     Running   0          43m     192.168.56.11   k8s1   <none>           <none>
	 kube-system         registry-adder-t667s               1/1     Running   0          43m     192.168.56.12   k8s2   <none>           <none>
	 
Stderr:
 	 

Fetching command output from pods [cilium-2dgx4 cilium-pfdvx]
09:03:28 STEP: Performing Cilium service preflight check
09:03:28 STEP: Performing K8s service preflight check
cmd: kubectl exec -n kube-system cilium-2dgx4 -c cilium-agent -- cilium status
Exitcode: 0 
Stdout:
 	 KVStore:                 Ok   Disabled
	 Kubernetes:              Ok   1.24 (v1.24.4) [linux/amd64]
	 Kubernetes APIs:         ["cilium/v2::CiliumClusterwideNetworkPolicy", "cilium/v2::CiliumNetworkPolicy", "cilium/v2::CiliumNode", "cilium/v2alpha1::CiliumEndpointSlice", "core/v1::Namespace", "core/v1::Pods", "core/v1::Service", "discovery/v1::EndpointSlice", "networking.k8s.io/v1::NetworkPolicy"]
	 KubeProxyReplacement:    Strict    [enp0s16 192.168.59.15 fd17:625c:f037:2:a00:27ff:fed7:e94, enp0s3 10.0.2.15 fd04::11, enp0s8 192.168.56.11 fd04::11 (Direct Routing)]
	 Host firewall:           Enabled   [enp0s16, enp0s3, enp0s8]
	 CNI Chaining:            none
	 CNI Config file:         CNI configuration file management disabled
	 Cilium:                  Ok   1.13.90 (v1.13.90-4e83f5a8)
	 NodeMonitor:             Listening for events on 3 CPUs with 64x4096 of shared memory
	 Cilium health daemon:    Ok   
	 IPAM:                    IPv4: 2/254 allocated from 10.0.0.0/24, IPv6: 2/254 allocated from fd02::/120
	 IPv6 BIG TCP:            Disabled
	 BandwidthManager:        Disabled
	 Host Routing:            Legacy
	 Masquerading:            BPF   [enp0s16, enp0s3, enp0s8]   10.0.0.0/8 [IPv4: Enabled, IPv6: Disabled]
	 Controller Status:       21/21 healthy
	 Proxy Status:            OK, ip 10.0.0.17, 0 redirects active on ports 10000-20000
	 Global Identity Range:   min 256, max 65535
	 Hubble:                  Ok   Current/Max Flows: 7382/65535 (11.26%), Flows/s: 28.67   Metrics: Disabled
	 Encryption:              Disabled
	 Cluster health:          1/2 reachable   (2023-04-03T09:03:25Z)
	   Name                   IP              Node          Endpoints
	   k8s2                   192.168.56.12   unreachable   reachable
	 
Stderr:
 	 

cmd: kubectl exec -n kube-system cilium-2dgx4 -c cilium-agent -- cilium endpoint list
Exitcode: 0 
Stdout:
 	 ENDPOINT   POLICY (ingress)   POLICY (egress)   IDENTITY   LABELS (source:key[=value])                                   IPv6       IPv4        STATUS   
	            ENFORCEMENT        ENFORCEMENT                                                                                                       
	 1577       Enabled            Enabled           1          k8s:cilium.io/ci-node=k8s1                                                           ready   
	                                                            k8s:node-role.kubernetes.io/control-plane                                                    
	                                                            k8s:node.kubernetes.io/exclude-from-external-load-balancers                                  
	                                                            k8s:status=lockdown                                                                          
	                                                            reserved:host                                                                                
	 1777       Disabled           Disabled          4          reserved:health                                               fd02::d0   10.0.0.49   ready   
	 
Stderr:
 	 

cmd: kubectl exec -n kube-system cilium-pfdvx -c cilium-agent -- cilium status
Exitcode: 0 
Stdout:
 	 KVStore:                 Ok   Disabled
	 Kubernetes:              Ok   1.24 (v1.24.4) [linux/amd64]
	 Kubernetes APIs:         ["cilium/v2::CiliumClusterwideNetworkPolicy", "cilium/v2::CiliumNetworkPolicy", "cilium/v2::CiliumNode", "cilium/v2alpha1::CiliumEndpointSlice", "core/v1::Namespace", "core/v1::Pods", "core/v1::Service", "discovery/v1::EndpointSlice", "networking.k8s.io/v1::NetworkPolicy"]
	 KubeProxyReplacement:    Strict    [enp0s16 192.168.59.15 fd17:625c:f037:2:a00:27ff:fe9b:f1e4, enp0s3 10.0.2.15 fd04::12, enp0s8 192.168.56.12 fd04::12 (Direct Routing)]
	 Host firewall:           Enabled   [enp0s16, enp0s3, enp0s8]
	 CNI Chaining:            none
	 CNI Config file:         CNI configuration file management disabled
	 Cilium:                  Ok   1.13.90 (v1.13.90-4e83f5a8)
	 NodeMonitor:             Listening for events on 3 CPUs with 64x4096 of shared memory
	 Cilium health daemon:    Ok   
	 IPAM:                    IPv4: 3/254 allocated from 10.0.1.0/24, IPv6: 3/254 allocated from fd02::100/120
	 IPv6 BIG TCP:            Disabled
	 BandwidthManager:        Disabled
	 Host Routing:            Legacy
	 Masquerading:            BPF   [enp0s16, enp0s3, enp0s8]   10.0.0.0/8 [IPv4: Enabled, IPv6: Disabled]
	 Controller Status:       25/25 healthy
	 Proxy Status:            OK, ip 10.0.1.187, 0 redirects active on ports 10000-20000
	 Global Identity Range:   min 256, max 65535
	 Hubble:                  Ok   Current/Max Flows: 2457/65535 (3.75%), Flows/s: 9.19   Metrics: Disabled
	 Encryption:              Disabled
	 Cluster health:          1/2 reachable   (2023-04-03T09:03:19Z)
	   Name                   IP              Node          Endpoints
	   k8s1                   192.168.56.11   unreachable   reachable
	 
Stderr:
 	 

cmd: kubectl exec -n kube-system cilium-pfdvx -c cilium-agent -- cilium endpoint list
Exitcode: 0 
Stdout:
 	 ENDPOINT   POLICY (ingress)   POLICY (egress)   IDENTITY   LABELS (source:key[=value])                                                  IPv6        IPv4         STATUS   
	            ENFORCEMENT        ENFORCEMENT                                                                                                                        
	 1599       Disabled           Disabled          18097      k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name=kube-system   fd02::150   10.0.1.123   ready   
	                                                            k8s:io.cilium.k8s.policy.cluster=default                                                                      
	                                                            k8s:io.cilium.k8s.policy.serviceaccount=coredns                                                               
	                                                            k8s:io.kubernetes.pod.namespace=kube-system                                                                   
	                                                            k8s:k8s-app=kube-dns                                                                                          
	 1777       Enabled            Enabled           1          k8s:cilium.io/ci-node=k8s2                                                                            ready   
	                                                            k8s:status=lockdown                                                                                           
	                                                            reserved:host                                                                                                 
	 2221       Disabled           Disabled          4          reserved:health                                                              fd02::1eb   10.0.1.18    ready   
	 
Stderr:
 	 

===================== Exiting AfterFailed =====================
09:03:33 STEP: Running AfterEach for block EntireTestsuite K8sDatapathConfig
09:03:33 STEP: Running AfterEach for block EntireTestsuite

[[ATTACHMENT|0eaf8521_K8sDatapathConfig_Host_firewall_With_native_routing_and_endpoint_routes.zip]]
09:03:36 STEP: Running AfterAll block for EntireTestsuite K8sDatapathConfig Host firewall

ZIP Links:

Click to show.

https://jenkins.cilium.io/job/Cilium-PR-K8s-1.24-kernel-5.4//1553/artifact/0eaf8521_K8sDatapathConfig_Host_firewall_With_native_routing_and_endpoint_routes.zip
https://jenkins.cilium.io/job/Cilium-PR-K8s-1.24-kernel-5.4//1553/artifact/8a16d34d_K8sDatapathConfig_Host_firewall_With_native_routing.zip
https://jenkins.cilium.io/job/Cilium-PR-K8s-1.24-kernel-5.4//1553/artifact/aec20a4d_K8sDatapathConfig_Host_firewall_With_VXLAN_and_endpoint_routes.zip
https://jenkins.cilium.io/job/Cilium-PR-K8s-1.24-kernel-5.4//1553/artifact/d5e33947_K8sDatapathConfig_Host_firewall_With_VXLAN.zip
https://jenkins.cilium.io/job/Cilium-PR-K8s-1.24-kernel-5.4//1553/artifact/test_results_Cilium-PR-K8s-1.24-kernel-5.4_1553_BDD-Test-PR.zip

Jenkins URL: https://jenkins.cilium.io/job/Cilium-PR-K8s-1.24-kernel-5.4/1553/

If this is a duplicate of an existing flake, comment 'Duplicate of #<issue-number>' and close this issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    ci/flakeThis is a known failure that occurs in the tree. Please investigate me!staleThe stale bot thinks this issue is old. Add "pinned" label to prevent this from becoming stale.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions