Please support "Services without selectors" feature

[qingkunl]

The K8s official document has Services without selectors feature. However, when I experiment it with Cilium (kubeProxyReplacement=strict), it doesn't work. It seems like Cilium doesn't support this feature now. Many other CNIs already support it.

[brb]

@qingkunl Thanks for the issue. Are you sure that it doesn't work? Have you seen #12513 and #12438?

[qingkunl]

@qingkunl Thanks for the issue. Are you sure that it doesn't work? Have you seen #12513 and #12438?

@brb Thanks for the reference. I'm using K8s v1.20.2 + Cilium v1.9.9 and still see this issue.

Following is my service config. Please advice.

apiVersion: v1
kind: Service
metadata:
  name: service-qingkun
spec:
  type: NodePort
  ports:
    - protocol: TCP
      port: 80
      nodePort: 31081

---

apiVersion: v1
kind: Endpoints
metadata:
  name: service-qingkun
subsets:
  - addresses:
      - ip: 10.62.32.11
      - ip: 10.62.32.12
    ports:
      - port: 32080

I can confirm endpointslice has been created:

$ kubectl get svc | grep service-qingkun
service-qingkun   NodePort    172.18.117.9    <none>            80:31081/TCP   5m49s

$ kubectl get endpoints | grep service-qingkun
service-qingkun   10.62.32.11:32080,10.62.32.12:32080                          5m56s

$ kubectl get endpointslice | grep service-qingkun
service-qingkun-mm9g4   IPv4          32080   10.62.32.11,10.62.32.12                            6m

[joestringer]

Maybe you can debug a bit on the Cilium side to understand how Cilium is interpreting those services?

Eg, cilium service list, cilium bpf lb list inside the pod.

[github-actions]

This issue has been automatically marked as stale because it has not
had recent activity. It will be closed if no further activity occurs.

[github-actions]

This issue has been automatically marked as stale because it has not
had recent activity. It will be closed if no further activity occurs.

[github-actions]

This issue has not seen any activity since it was marked stale.
Closing.