Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix the short delay between when the pod starts and when Calico allows outbound traffic from the pod in azure cni overlay #4290

Open
eyltl opened this issue May 16, 2024 · 3 comments

Comments

@eyltl
Copy link

eyltl commented May 16, 2024

Is your feature request related to a problem? Please describe.
Today on Azure CNI Overlay with Calico as network policy, there is a short delay between when the pod starts and when Calico allows outbound traffic from the pod. there is no explanation for why, but I believe that it's the same reason it is for AWS CNI with Calico, until kubelet adds the POD IP to the pod spec, calico is blocking the traffic.
kubernetes/kubernetes#39113

Describe the solution you'd like
AWS solves this issue using AWS CNI
https://github.com/aws/amazon-vpc-cni-k8s?tab=readme-ov-file#annotate_pod_ip-v193:~:text=ANNOTATE_POD_IP%20(v1.9.3%2B

Describe alternatives you've considered
why not implement something similar? adding sleep to pods startup or alternative patches are not a real solution. or companies that still dont want to use cilium.

@PixelRobots
Copy link
Collaborator

I think @phealy or @chasewilson should be able to help here.

@eyltl
Copy link
Author

eyltl commented May 31, 2024

Any comment on this one please?
@phealy / @chasewilson

@fasaxc
Copy link

fasaxc commented Jul 4, 2024

Calico team member here; I didn't spot this one when I filed #4385 with a bit more technical detail/suggestions

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants