Bug 1908782: terraform: Add rules to allow internal IPsec traffic #4491

markdgray · 2020-12-17T10:02:12Z

Enable ESP and IKE traffic across all installer targets between
worker and master nodes.

This is required to resolve https://bugzilla.redhat.com/show_bug.cgi?id=1908782 which is required to enable key feature for OCP 4.7 (OVN Kubernetes IPsec)

Signed-off-by: Mark Gray mark.d.gray@redhat.com

openshift-ci-robot · 2020-12-17T10:02:29Z

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

markdgray · 2020-12-17T10:02:40Z

/test all

markdgray · 2020-12-17T10:07:06Z

/test tf-fmt

markdgray · 2020-12-17T10:08:22Z

/test tf-lint
/test unit
/test verify-codegen
/test verify-vendor
/test yaml-lint

staebler · 2020-12-17T15:50:37Z

@markdgray Please add some context around why this is needed. Is there an issue that you can link to?

markdgray · 2020-12-17T15:57:11Z

@markdgray Please add some context around why this is needed. Is there an issue that you can link to?

@staebler I just added a Bz. Basically, we are unable to deploy an IPsec cluster on GCP. From debugging, I realised that ESP is blocked between nodes - ESP is required for IPsec. For some reason this seems to work currently on AWS but I enabled the ports there as well just to be explicit.

staebler · 2020-12-17T17:56:30Z

/bugzilla refresh

openshift-ci-robot · 2020-12-17T17:56:31Z

@staebler: No Bugzilla bug is referenced in the title of this pull request.
To reference a bug, add 'Bug XXX:' to the title of this pull request and request another bug refresh with /bugzilla refresh.

In response to this:

/bugzilla refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-ci-robot · 2020-12-17T18:23:38Z

@markdgray: This pull request references Bugzilla bug 1908782, which is invalid:

expected the bug to target the "4.7.0" release, but it targets "---" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

Bug 1908782: terraform: Add rules to allow internal IPsec traffic

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

markdgray · 2020-12-17T18:23:48Z

/bugzilla refresh

openshift-ci-robot · 2020-12-17T18:23:50Z

@markdgray: This pull request references Bugzilla bug 1908782, which is invalid:

expected the bug to target the "4.7.0" release, but it targets "---" instead

Comment /bugzilla refresh to re-evaluate validity if changes to the Bugzilla bug are made, or edit the title of this pull request to link to a different bug.

In response to this:

/bugzilla refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

markdgray · 2020-12-17T19:47:29Z

/bugzilla refresh

openshift-ci-robot · 2020-12-17T19:47:34Z

@markdgray: An error was encountered adding this pull request to the external tracker bugs for bug 1908782 on the Bugzilla server at https://bugzilla.redhat.com:

JSONRPC error 32000: There was an error reported for the RPC call to Jira: There was an error reported for a GitHub REST call. URL: https://api.github.com/repos/openshift/installer/pulls/4491 Error: 403 Forbidden at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 111. at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 111. eval {...} called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 98 Bugzilla::Extension::ExternalBugs::Type::GitHub::_do_rest_call('Bugzilla::Extension::ExternalBugs::Type::GitHub=HASH(0x559589...', 'https://api.github.com/repos/openshift/installer/pulls/4491', 'GET') called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 62 Bugzilla::Extension::ExternalBugs::Type::GitHub::get_data('Bugzilla::Extension::ExternalBugs::Type::GitHub=HASH(0x559589...', 'Bugzilla::Extension::ExternalBugs::Bug=HASH(0x55958cf104a0)') called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Bug.pm line 302 eval {...} called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Bug.pm line 302 Bugzilla::Extension::ExternalBugs::Bug::update_ext_info('Bugzilla::Extension::ExternalBugs::Bug=HASH(0x55958cf104a0)', 1) called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Bug.pm line 125 Bugzilla::Extension::ExternalBugs::Bug::create('Bugzilla::Extension::ExternalBugs::Bug', 'HASH(0x55958bd0edc0)') called at /var/www/html/bugzilla/extensions/ExternalBugs/Extension.pm line 940 Bugzilla::Extension::ExternalBugs::bug_start_of_update('Bugzilla::Extension::ExternalBugs=HASH(0x5595866080f0)', 'HASH(0x55958791b448)') called at /var/www/html/bugzilla/Bugzilla/Hook.pm line 21 Bugzilla::Hook::process('bug_start_of_update', 'HASH(0x55958791b448)') called at /var/www/html/bugzilla/Bugzilla/Bug.pm line 1173 Bugzilla::Bug::update('Bugzilla::Bug=HASH(0x55958a8ff738)') called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/WebService.pm line 88 Bugzilla::Extension::ExternalBugs::WebService::add_external_bug('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x55958bebdc10)') called at (eval 4295) line 1 eval ' $procedure->{code}->($self, @params) ;' called at /usr/share/perl5/vendor_perl/JSON/RPC/Legacy/Server.pm line 220 JSON::RPC::Legacy::Server::_handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x559586c27c60)') called at /var/www/html/bugzilla/Bugzilla/WebService/Server/JSONRPC.pm line 297 Bugzilla::WebService::Server::JSONRPC::_handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x559586c27c60)') called at /usr/share/perl5/vendor_perl/JSON/RPC/Legacy/Server.pm line 126 JSON::RPC::Legacy::Server::handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...') called at /var/www/html/bugzilla/Bugzilla/WebService/Server/JSONRPC.pm line 70 Bugzilla::WebService::Server::JSONRPC::handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...') called at /var/www/html/bugzilla/jsonrpc.cgi line 31 ModPerl::ROOT::Bugzilla::ModPerl::ResponseHandler::var_www_html_bugzilla_jsonrpc_2ecgi::handler('Apache2::RequestRec=SCALAR(0x55958d780740)') called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 207 eval {...} called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 207 ModPerl::RegistryCooker::run('Bugzilla::ModPerl::ResponseHandler=HASH(0x55958daf3d28)') called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 173 ModPerl::RegistryCooker::default_handler('Bugzilla::ModPerl::ResponseHandler=HASH(0x55958daf3d28)') called at /usr/lib64/perl5/vendor_perl/ModPerl/Registry.pm line 32 ModPerl::Registry::handler('Bugzilla::ModPerl::ResponseHandler', 'Apache2::RequestRec=SCALAR(0x55958d780740)') called at /var/www/html/bugzilla/mod_perl.pl line 139 Bugzilla::ModPerl::ResponseHandler::handler('Bugzilla::ModPerl::ResponseHandler', 'Apache2::RequestRec=SCALAR(0x55958d780740)') called at (eval 4295) line 0 eval {...} called at (eval 4295) line 0 at /var/www/html/bugzilla/Bugzilla/Error.pm line 130. Bugzilla::Error::_throw_error('global/user-error.html.tmpl', 'ext_bz_rest_error', 'HASH(0x55958d84dad0)') called at /var/www/html/bugzilla/Bugzilla/Error.pm line 193 Bugzilla::Error::ThrowUserError('ext_bz_rest_error', 'HASH(0x55958d84dad0)') called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 120 Bugzilla::Extension::ExternalBugs::Type::GitHub::_do_rest_call('Bugzilla::Extension::ExternalBugs::Type::GitHub=HASH(0x559589...', 'https://api.github.com/repos/openshift/installer/pulls/4491', 'GET') called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 62 Bugzilla::Extension::ExternalBugs::Type::GitHub::get_data('Bugzilla::Extension::ExternalBugs::Type::GitHub=HASH(0x559589...', 'Bugzilla::Extension::ExternalBugs::Bug=HASH(0x55958cf104a0)') called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Bug.pm line 302 eval {...} called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Bug.pm line 302 Bugzilla::Extension::ExternalBugs::Bug::update_ext_info('Bugzilla::Extension::ExternalBugs::Bug=HASH(0x55958cf104a0)', 1) called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/Bug.pm line 125 Bugzilla::Extension::ExternalBugs::Bug::create('Bugzilla::Extension::ExternalBugs::Bug', 'HASH(0x55958bd0edc0)') called at /var/www/html/bugzilla/extensions/ExternalBugs/Extension.pm line 940 Bugzilla::Extension::ExternalBugs::bug_start_of_update('Bugzilla::Extension::ExternalBugs=HASH(0x5595866080f0)', 'HASH(0x55958791b448)') called at /var/www/html/bugzilla/Bugzilla/Hook.pm line 21 Bugzilla::Hook::process('bug_start_of_update', 'HASH(0x55958791b448)') called at /var/www/html/bugzilla/Bugzilla/Bug.pm line 1173 Bugzilla::Bug::update('Bugzilla::Bug=HASH(0x55958a8ff738)') called at /loader/0x559576bb3ac8/Bugzilla/Extension/ExternalBugs/WebService.pm line 88 Bugzilla::Extension::ExternalBugs::WebService::add_external_bug('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x55958bebdc10)') called at (eval 4295) line 1 eval ' $procedure->{code}->($self, @params) ;' called at /usr/share/perl5/vendor_perl/JSON/RPC/Legacy/Server.pm line 220 JSON::RPC::Legacy::Server::_handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x559586c27c60)') called at /var/www/html/bugzilla/Bugzilla/WebService/Server/JSONRPC.pm line 297 Bugzilla::WebService::Server::JSONRPC::_handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x559586c27c60)') called at /usr/share/perl5/vendor_perl/JSON/RPC/Legacy/Server.pm line 126 JSON::RPC::Legacy::Server::handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...') called at /var/www/html/bugzilla/Bugzilla/WebService/Server/JSONRPC.pm line 70 Bugzilla::WebService::Server::JSONRPC::handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...') called at /var/www/html/bugzilla/jsonrpc.cgi line 31 ModPerl::ROOT::Bugzilla::ModPerl::ResponseHandler::var_www_html_bugzilla_jsonrpc_2ecgi::handler('Apache2::RequestRec=SCALAR(0x55958d780740)') called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 207 eval {...} called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 207 ModPerl::RegistryCooker::run('Bugzilla::ModPerl::ResponseHandler=HASH(0x55958daf3d28)') called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 173 ModPerl::RegistryCooker::default_handler('Bugzilla::ModPerl::ResponseHandler=HASH(0x55958daf3d28)') called at /usr/lib64/perl5/vendor_perl/ModPerl/Registry.pm line 32 ModPerl::Registry::handler('Bugzilla::ModPerl::ResponseHandler', 'Apache2::RequestRec=SCALAR(0x55958d780740)') called at /var/www/html/bugzilla/mod_perl.pl line 139 Bugzilla::ModPerl::ResponseHandler::handler('Bugzilla::ModPerl::ResponseHandler', 'Apache2::RequestRec=SCALAR(0x55958d780740)') called at (eval 4295) line 0 eval {...} called at (eval 4295) line 0
Please contact an administrator to resolve this issue, then request a bug refresh with /bugzilla refresh.

In response to this:

/bugzilla refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

markdgray · 2020-12-17T19:50:17Z

/bugzilla refresh

openshift-ci-robot · 2020-12-17T19:50:20Z

@markdgray: An error was encountered adding this pull request to the external tracker bugs for bug 1908782 on the Bugzilla server at https://bugzilla.redhat.com:

JSONRPC error 32000: There was an error reported for the RPC call to Jira: There was an error reported for a GitHub REST call. URL: https://api.github.com/repos/openshift/installer/pulls/4491 Error: 403 Forbidden at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 111. at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 111. eval {...} called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 98 Bugzilla::Extension::ExternalBugs::Type::GitHub::_do_rest_call('Bugzilla::Extension::ExternalBugs::Type::GitHub=HASH(0x556e29...', 'https://api.github.com/repos/openshift/installer/pulls/4491', 'GET') called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 62 Bugzilla::Extension::ExternalBugs::Type::GitHub::get_data('Bugzilla::Extension::ExternalBugs::Type::GitHub=HASH(0x556e29...', 'Bugzilla::Extension::ExternalBugs::Bug=HASH(0x556e298d6910)') called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Bug.pm line 302 eval {...} called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Bug.pm line 302 Bugzilla::Extension::ExternalBugs::Bug::update_ext_info('Bugzilla::Extension::ExternalBugs::Bug=HASH(0x556e298d6910)', 1) called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Bug.pm line 125 Bugzilla::Extension::ExternalBugs::Bug::create('Bugzilla::Extension::ExternalBugs::Bug', 'HASH(0x556e29887e00)') called at /var/www/html/bugzilla/extensions/ExternalBugs/Extension.pm line 940 Bugzilla::Extension::ExternalBugs::bug_start_of_update('Bugzilla::Extension::ExternalBugs=HASH(0x556e28e7dc10)', 'HASH(0x556e29871600)') called at /var/www/html/bugzilla/Bugzilla/Hook.pm line 21 Bugzilla::Hook::process('bug_start_of_update', 'HASH(0x556e29871600)') called at /var/www/html/bugzilla/Bugzilla/Bug.pm line 1173 Bugzilla::Bug::update('Bugzilla::Bug=HASH(0x556e29870280)') called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/WebService.pm line 88 Bugzilla::Extension::ExternalBugs::WebService::add_external_bug('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x556e29272a78)') called at (eval 2049) line 1 eval ' $procedure->{code}->($self, @params) ;' called at /usr/share/perl5/vendor_perl/JSON/RPC/Legacy/Server.pm line 220 JSON::RPC::Legacy::Server::_handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x556e2934e7d8)') called at /var/www/html/bugzilla/Bugzilla/WebService/Server/JSONRPC.pm line 297 Bugzilla::WebService::Server::JSONRPC::_handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x556e2934e7d8)') called at /usr/share/perl5/vendor_perl/JSON/RPC/Legacy/Server.pm line 126 JSON::RPC::Legacy::Server::handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...') called at /var/www/html/bugzilla/Bugzilla/WebService/Server/JSONRPC.pm line 70 Bugzilla::WebService::Server::JSONRPC::handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...') called at /var/www/html/bugzilla/jsonrpc.cgi line 31 ModPerl::ROOT::Bugzilla::ModPerl::ResponseHandler::var_www_html_bugzilla_jsonrpc_2ecgi::handler('Apache2::RequestRec=SCALAR(0x556e292bdf30)') called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 207 eval {...} called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 207 ModPerl::RegistryCooker::run('Bugzilla::ModPerl::ResponseHandler=HASH(0x556e294288f8)') called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 173 ModPerl::RegistryCooker::default_handler('Bugzilla::ModPerl::ResponseHandler=HASH(0x556e294288f8)') called at /usr/lib64/perl5/vendor_perl/ModPerl/Registry.pm line 32 ModPerl::Registry::handler('Bugzilla::ModPerl::ResponseHandler', 'Apache2::RequestRec=SCALAR(0x556e292bdf30)') called at /var/www/html/bugzilla/mod_perl.pl line 139 Bugzilla::ModPerl::ResponseHandler::handler('Bugzilla::ModPerl::ResponseHandler', 'Apache2::RequestRec=SCALAR(0x556e292bdf30)') called at (eval 2049) line 0 eval {...} called at (eval 2049) line 0 at /var/www/html/bugzilla/Bugzilla/Error.pm line 130. Bugzilla::Error::_throw_error('global/user-error.html.tmpl', 'ext_bz_rest_error', 'HASH(0x556e298d7048)') called at /var/www/html/bugzilla/Bugzilla/Error.pm line 193 Bugzilla::Error::ThrowUserError('ext_bz_rest_error', 'HASH(0x556e298d7048)') called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 120 Bugzilla::Extension::ExternalBugs::Type::GitHub::_do_rest_call('Bugzilla::Extension::ExternalBugs::Type::GitHub=HASH(0x556e29...', 'https://api.github.com/repos/openshift/installer/pulls/4491', 'GET') called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Type/GitHub.pm line 62 Bugzilla::Extension::ExternalBugs::Type::GitHub::get_data('Bugzilla::Extension::ExternalBugs::Type::GitHub=HASH(0x556e29...', 'Bugzilla::Extension::ExternalBugs::Bug=HASH(0x556e298d6910)') called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Bug.pm line 302 eval {...} called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Bug.pm line 302 Bugzilla::Extension::ExternalBugs::Bug::update_ext_info('Bugzilla::Extension::ExternalBugs::Bug=HASH(0x556e298d6910)', 1) called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/Bug.pm line 125 Bugzilla::Extension::ExternalBugs::Bug::create('Bugzilla::Extension::ExternalBugs::Bug', 'HASH(0x556e29887e00)') called at /var/www/html/bugzilla/extensions/ExternalBugs/Extension.pm line 940 Bugzilla::Extension::ExternalBugs::bug_start_of_update('Bugzilla::Extension::ExternalBugs=HASH(0x556e28e7dc10)', 'HASH(0x556e29871600)') called at /var/www/html/bugzilla/Bugzilla/Hook.pm line 21 Bugzilla::Hook::process('bug_start_of_update', 'HASH(0x556e29871600)') called at /var/www/html/bugzilla/Bugzilla/Bug.pm line 1173 Bugzilla::Bug::update('Bugzilla::Bug=HASH(0x556e29870280)') called at /loader/0x556e189561d8/Bugzilla/Extension/ExternalBugs/WebService.pm line 88 Bugzilla::Extension::ExternalBugs::WebService::add_external_bug('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x556e29272a78)') called at (eval 2049) line 1 eval ' $procedure->{code}->($self, @params) ;' called at /usr/share/perl5/vendor_perl/JSON/RPC/Legacy/Server.pm line 220 JSON::RPC::Legacy::Server::_handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x556e2934e7d8)') called at /var/www/html/bugzilla/Bugzilla/WebService/Server/JSONRPC.pm line 297 Bugzilla::WebService::Server::JSONRPC::_handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...', 'HASH(0x556e2934e7d8)') called at /usr/share/perl5/vendor_perl/JSON/RPC/Legacy/Server.pm line 126 JSON::RPC::Legacy::Server::handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...') called at /var/www/html/bugzilla/Bugzilla/WebService/Server/JSONRPC.pm line 70 Bugzilla::WebService::Server::JSONRPC::handle('Bugzilla::WebService::Server::JSONRPC::Bugzilla::Extension::E...') called at /var/www/html/bugzilla/jsonrpc.cgi line 31 ModPerl::ROOT::Bugzilla::ModPerl::ResponseHandler::var_www_html_bugzilla_jsonrpc_2ecgi::handler('Apache2::RequestRec=SCALAR(0x556e292bdf30)') called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 207 eval {...} called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 207 ModPerl::RegistryCooker::run('Bugzilla::ModPerl::ResponseHandler=HASH(0x556e294288f8)') called at /usr/lib64/perl5/vendor_perl/ModPerl/RegistryCooker.pm line 173 ModPerl::RegistryCooker::default_handler('Bugzilla::ModPerl::ResponseHandler=HASH(0x556e294288f8)') called at /usr/lib64/perl5/vendor_perl/ModPerl/Registry.pm line 32 ModPerl::Registry::handler('Bugzilla::ModPerl::ResponseHandler', 'Apache2::RequestRec=SCALAR(0x556e292bdf30)') called at /var/www/html/bugzilla/mod_perl.pl line 139 Bugzilla::ModPerl::ResponseHandler::handler('Bugzilla::ModPerl::ResponseHandler', 'Apache2::RequestRec=SCALAR(0x556e292bdf30)') called at (eval 2049) line 0 eval {...} called at (eval 2049) line 0
Please contact an administrator to resolve this issue, then request a bug refresh with /bugzilla refresh.

In response to this:

/bugzilla refresh

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

petr-muller · 2020-12-18T10:12:54Z

/bugzilla refresh

openshift-bot · 2020-12-22T05:05:24Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T05:18:26Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T05:57:25Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T06:10:25Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T06:23:26Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T06:36:24Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T06:49:24Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T07:02:24Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T08:33:23Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T08:46:23Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T08:59:24Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T09:12:25Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T09:38:23Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T09:51:25Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T10:04:25Z

/retest

Please review the full test history for this PR and help us cut down flakes.

Enable ESP and IKE traffic across all installer targets between worker and master nodes. Signed-off-by: Mark Gray <mark.d.gray@redhat.com>

staebler · 2020-12-22T14:35:06Z

/lgtm cancel

msg=Error: Missing required argument
level=error
level=error msg=  on ../tmp/openshift-install-456315437/vpc/sg-master.tf line 116, in resource "aws_security_group_rule" "master_ingress_esp":
level=error msg= 116: resource "aws_security_group_rule" "master_ingress_esp" {
level=error
level=error msg=The argument "to_port" is required, but no definition was found.
level=error
level=error
level=error msg=Error: Missing required argument
level=error
level=error msg=  on ../tmp/openshift-install-456315437/vpc/sg-master.tf line 116, in resource "aws_security_group_rule" "master_ingress_esp":
level=error msg= 116: resource "aws_security_group_rule" "master_ingress_esp" {
level=error
level=error msg=The argument "from_port" is required, but no definition was found.
level=error
level=error
level=error msg=Error: Missing required argument
level=error
level=error msg=  on ../tmp/openshift-install-456315437/vpc/sg-master.tf line 154, in resource "aws_security_group_rule" "master_ingress_esp_from_worker":
level=error msg= 154: resource "aws_security_group_rule" "master_ingress_esp_from_worker" {
level=error
level=error msg=The argument "to_port" is required, but no definition was found.
level=error
level=error
level=error msg=Error: Missing required argument
level=error
level=error msg=  on ../tmp/openshift-install-456315437/vpc/sg-master.tf line 154, in resource "aws_security_group_rule" "master_ingress_esp_from_worker":
level=error msg= 154: resource "aws_security_group_rule" "master_ingress_esp_from_worker" {
level=error
level=error msg=The argument "from_port" is required, but no definition was found.
level=error
level=error
level=error msg=Error: Missing required argument
level=error
level=error msg=  on ../tmp/openshift-install-456315437/vpc/sg-worker.tf line 96, in resource "aws_security_group_rule" "worker_ingress_esp":
level=error msg=  96: resource "aws_security_group_rule" "worker_ingress_esp" {
level=error
level=error msg=The argument "from_port" is required, but no definition was found.
level=error
level=error
level=error msg=Error: Missing required argument
level=error
level=error msg=  on ../tmp/openshift-install-456315437/vpc/sg-worker.tf line 96, in resource "aws_security_group_rule" "worker_ingress_esp":
level=error msg=  96: resource "aws_security_group_rule" "worker_ingress_esp" {
level=error
level=error msg=The argument "to_port" is required, but no definition was found.

markdgray · 2020-12-22T15:56:51Z

/retest

staebler

/lgtm

markdgray · 2020-12-22T17:29:28Z

Thanks @staebler ESP doesn't have ports so I wasn't sure how to set it. I reviewed some documentation and ran some e2e tests and it seems to be correct now.

openshift-bot · 2020-12-22T17:50:55Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-bot · 2020-12-22T18:30:07Z

/retest

Please review the full test history for this PR and help us cut down flakes.

openshift-ci · 2020-12-22T19:31:22Z

@markdgray: The following test failed, say /retest to rerun all failed tests:

Test name	Commit	Details	Rerun command
ci/prow/e2e-crc	`40e8c4c`	link	`/test e2e-crc`

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

openshift-ci-robot · 2020-12-22T19:47:24Z

@markdgray: All pull requests linked via external trackers have merged:

openshift/installer#4491

Bugzilla bug 1908782 has been moved to the MODIFIED state.

In response to this:

Bug 1908782: terraform: Add rules to allow internal IPsec traffic

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

openshift-ci-robot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Dec 17, 2020

openshift-ci-robot requested review from jstuever and patrickdillon December 17, 2020 10:02

markdgray force-pushed the fix/ipsec_fw_rules branch from ecbe200 to fe44c2e Compare December 17, 2020 10:06

markdgray marked this pull request as ready for review December 17, 2020 10:14

openshift-ci-robot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Dec 17, 2020

markdgray force-pushed the fix/ipsec_fw_rules branch from fe44c2e to 0c9c6eb Compare December 17, 2020 15:11

markdgray changed the title ~~terraform: Add rules to allow internal IPsec traffic~~ BUG: 1908782 - terraform: Add rules to allow internal IPsec traffic Dec 17, 2020

markdgray changed the title ~~BUG: 1908782 - terraform: Add rules to allow internal IPsec traffic~~ Bug 1908782: terraform: Add rules to allow internal IPsec traffic Dec 17, 2020

openshift-ci-robot added bugzilla/severity-unspecified Referenced Bugzilla bug's severity is unspecified for the PR. bugzilla/invalid-bug Indicates that a referenced Bugzilla bug is invalid for the branch this PR is targeting. labels Dec 17, 2020

markdgray force-pushed the fix/ipsec_fw_rules branch from 68a718a to d951211 Compare December 22, 2020 10:59

openshift-ci-robot removed the lgtm Indicates that a PR is ready to be merged. label Dec 22, 2020

markdgray force-pushed the fix/ipsec_fw_rules branch from d951211 to 641edc3 Compare December 22, 2020 13:03

terraform: Add rules to allow internal IPsec traffic

40e8c4c

Enable ESP and IKE traffic across all installer targets between worker and master nodes. Signed-off-by: Mark Gray <mark.d.gray@redhat.com>

markdgray force-pushed the fix/ipsec_fw_rules branch from 641edc3 to 40e8c4c Compare December 22, 2020 13:41

staebler reviewed Dec 22, 2020

View reviewed changes

openshift-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Dec 22, 2020

openshift-merge-robot merged commit d579022 into openshift:master Dec 22, 2020

Bug 1908782: terraform: Add rules to allow internal IPsec traffic #4491

Bug 1908782: terraform: Add rules to allow internal IPsec traffic #4491

Conversation

markdgray commented Dec 17, 2020 • edited

openshift-ci-robot commented Dec 17, 2020

markdgray commented Dec 17, 2020

markdgray commented Dec 17, 2020

markdgray commented Dec 17, 2020

staebler commented Dec 17, 2020

markdgray commented Dec 17, 2020 • edited

staebler commented Dec 17, 2020

openshift-ci-robot commented Dec 17, 2020

openshift-ci-robot commented Dec 17, 2020

markdgray commented Dec 17, 2020

openshift-ci-robot commented Dec 17, 2020

markdgray commented Dec 17, 2020

openshift-ci-robot commented Dec 17, 2020

markdgray commented Dec 17, 2020

openshift-ci-robot commented Dec 17, 2020

petr-muller commented Dec 18, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

staebler commented Dec 22, 2020

markdgray commented Dec 22, 2020

staebler left a comment

Choose a reason for hiding this comment

markdgray commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-bot commented Dec 22, 2020

openshift-ci bot commented Dec 22, 2020 • edited

openshift-ci-robot commented Dec 22, 2020

markdgray commented Dec 17, 2020 •

edited

markdgray commented Dec 17, 2020 •

edited

openshift-ci bot commented Dec 22, 2020 •

edited