-
Notifications
You must be signed in to change notification settings - Fork 260
Closed
Description
What happened:
In some cluster, customer are seeing this below errors in azure-npm.log
Stderr: [exit status 1, ipset v6.34: Syntax error: Elem separator in <IP_ADDR>,<PORT_NUM>, but settype hash:net supports none.]
This error occurs when 2 different k8s objs for which NPM creates Ipsets are named the same. One such example is illustrated below. Here both the port is named as "http" and the label's key is "http". This results in NPM creating the same ipset name.
apiVersion: v1
kind: Pod
metadata:
name: hello
labels:
http: redis
spec:
containers:
- name: hello
image: busybox
command: ['sh', '-c', 'echo "Hello, Kubernetes!" && sleep 3600']
ports:
- containerPort: 80
name: http
restartPolicy: OnFailure
What you expected to happen:
Expected behavior is two different ipsets being created without issues.
How to reproduce it:
- Add any network policy
- Apply above yaml and monitor NPM log.
Kubernetes Version:
all
Kernel (e.g. uname -a):
Ubuntu 18.04
Ubuntu 16.04
Metadata
Metadata
Assignees
Labels
No labels