Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disallow single service Ingresses to share an IP address #608

Closed
sjberman opened this issue Mar 7, 2018 · 0 comments
Closed

Disallow single service Ingresses to share an IP address #608

sjberman opened this issue Mar 7, 2018 · 0 comments
Assignees
Labels

Comments

@sjberman
Copy link
Contributor

sjberman commented Mar 7, 2018

Description

If a single-service Ingress exists for some IP address, a virtual server will be created, and its default pool will be set to that Ingress's service. If another single-service Ingress is created for the same IP address, the controller will attempt to share the virtual with this new Ingress, but it will still have the original default pool on the virtual. If this pool has gone away (due to Ingress1's service being deleted), this will cause the BIG-IP to error out trying to access a nonexistent pool (since the virtual still references it).

The solution here is to prevent single-service Ingresses from ever sharing an IP address. If an Ingress comes in and we already have a virtual for it, we should check if the virtual has a default pool. If it does, log an error that this IP address cannot be shared, and discontinue processing that Ingress.

This also makes sense to do because single service Ingresses do not have policies, so having different pools for one virtual, and no policy, doesn't really make sense.

Kubernetes Version

1.8

Controller Version

1.4

BIG-IP Version

12.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants