Skip to content

Conversation

giorio94
Copy link
Member

@giorio94 giorio94 commented Jan 7, 2025

The conformance external workloads workflow recently started failing consistently on the v1.15 branch with the following error:

msg="Failed to install iptables rules" error="cannot install static proxy rules:
unable to run 'ip6tables -t mangle -A CILIUM_PRE_mangle -m socket --transparent
-m mark ! --mark 0x00000e00/0x00000f00 -m mark ! --mark 0x00000800/0x00000f00
-m comment --comment cilium: any->pod redirect proxied traffic to host proxy
-j MARK --set-mark 0x00000200' iptables command: exit status 1 stderr="Warning:
Extension MARK revision 0 not supported, missing kernel module?\nip6tables:
No chain/target/match by that name.\n"" subsys=iptables

This seems to be the consequence of a regression backported by Canonical into linux-image-5.15.0-127-generic. Let's circumvent this problem by upgrading the selected image family, which was now largely out of date.

Related: https://bugs.launchpad.net/ubuntu/+source/linux-meta-oracle-5.15/+bug/2091960

Opening against main, although the workflow is not currently failing, to keep the versions aligned, and considering that Ubuntu 20.04 is now significantly old. Note that an equivalent version has already been merged into v1.15 (#36857) to unbreak that branch.

The conformance external workloads workflow recently started failing
consistently on the v1.15 branch with the following error:

> msg="Failed to install iptables rules" error="cannot install static proxy rules:
    unable to run 'ip6tables -t mangle -A CILIUM_PRE_mangle -m socket --transparent
    -m mark ! --mark 0x00000e00/0x00000f00 -m mark ! --mark 0x00000800/0x00000f00
    -m comment --comment cilium: any->pod redirect proxied traffic to host proxy
    -j MARK --set-mark 0x00000200' iptables command: exit status 1 stderr=\"Warning:
    Extension MARK revision 0 not supported, missing kernel module?\\nip6tables:
    No chain/target/match by that name.\\n\"" subsys=iptables

This seems to be the consequence of a regression backported by Canonical
into linux-image-5.15.0-127-generic. Let's circumvent this problem by
upgrading the selected image family, which was now largely out of date.

Related: https://bugs.launchpad.net/ubuntu/+source/linux-meta-oracle-5.15/+bug/2091960
Signed-off-by: Marco Iorio <marco.iorio@isovalent.com>
@giorio94 giorio94 added area/CI Continuous Integration testing issue or flake release-note/ci This PR makes changes to the CI. needs-backport/1.14 backport-done/1.15 The backport for Cilium 1.15.x for this PR is done. needs-backport/1.16 This PR / issue needs backporting to the v1.16 branch needs-backport/1.17 This PR / issue needs backporting to the v1.17 branch labels Jan 7, 2025
@giorio94 giorio94 requested review from a team as code owners January 7, 2025 11:19
@giorio94 giorio94 requested review from jrajahalme and brlbil January 7, 2025 11:19
@giorio94
Copy link
Member Author

giorio94 commented Jan 7, 2025

/test

Copy link
Member

@sayboras sayboras left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks

@aanm aanm added this pull request to the merge queue Jan 8, 2025
@github-merge-queue github-merge-queue bot removed this pull request from the merge queue due to failed status checks Jan 8, 2025
@aanm aanm added this pull request to the merge queue Jan 9, 2025
Merged via the queue into main with commit 3fe873c Jan 9, 2025
82 checks passed
@aanm aanm deleted the pr/giorio94/main/gha-external-workloads-bump-image branch January 9, 2025 08:29
@joamaki joamaki mentioned this pull request Jan 15, 2025
3 tasks
@joamaki joamaki added backport-pending/1.14 The backport for Cilium 1.14.x for this PR is in progress. and removed needs-backport/1.14 labels Jan 15, 2025
@github-actions github-actions bot added backport-done/1.14 The backport for Cilium 1.14.x for this PR is done. and removed backport-pending/1.14 The backport for Cilium 1.14.x for this PR is in progress. labels Jan 15, 2025
@rastislavs rastislavs mentioned this pull request Jan 21, 2025
45 tasks
@rastislavs rastislavs added backport-pending/1.17 The backport for Cilium 1.17.x for this PR is in progress. and removed needs-backport/1.17 This PR / issue needs backporting to the v1.17 branch labels Jan 21, 2025
@github-actions github-actions bot added backport-done/1.17 The backport for Cilium 1.17.x for this PR is done. and removed backport-pending/1.17 The backport for Cilium 1.17.x for this PR is in progress. labels Jan 22, 2025
@rastislavs rastislavs mentioned this pull request Jan 22, 2025
19 tasks
@rastislavs rastislavs added backport-pending/1.16 The backport for Cilium 1.16.x for this PR is in progress. and removed needs-backport/1.16 This PR / issue needs backporting to the v1.16 branch labels Jan 22, 2025
@github-actions github-actions bot added backport-done/1.16 The backport for Cilium 1.16.x for this PR is done. and removed backport-pending/1.16 The backport for Cilium 1.16.x for this PR is in progress. labels Jan 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/CI Continuous Integration testing issue or flake backport-done/1.14 The backport for Cilium 1.14.x for this PR is done. backport-done/1.15 The backport for Cilium 1.15.x for this PR is done. backport-done/1.16 The backport for Cilium 1.16.x for this PR is done. backport-done/1.17 The backport for Cilium 1.17.x for this PR is done. release-note/ci This PR makes changes to the CI.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants