EgressIP is not getting assigned to nodes in AWS cluster

Solution Verified - Updated -

Issue

  • The EgressIPs are not getting assigned to the nodes.
  • This issue is seen in cluster with OVNKubernetes as CNI in AWS platform.
  • Label k8s.ovn.org/egress-assignable is already assigned to nodes but EgressIP does not get assigned to any node.
  • Below errors can be seen in openshift-cloud-network-config-controller pod logs:

    2024-07-12T00:35:34.141994123Z I0712 00:35:34.141957       1 controller.go:182] Assigning key: 10.xx.xx.x to cloud-private-ip-config workqueue
    2024-07-12T00:35:34.145773388Z I0712 00:35:34.145743       1 cloudprivateipconfig_controller.go:357] CloudPrivateIPConfig: "10.xx.xx.x" will be added to node: "ip-10-xx-xx-xx.ec2.internal"
    2024-07-12T00:35:34.152765838Z I0712 00:35:34.152742       1 controller.go:182] Assigning key: 10.xx.xx.x to cloud-private-ip-config workqueue
    2024-07-12T00:35:34.153008282Z I0712 00:35:34.152971       1 cloudprivateipconfig_controller.go:381] Adding finalizer to CloudPrivateIPConfig: "10.xx.xx.x"
    2024-07-12T00:35:34.687729288Z E0712 00:35:34.687641       1 aws.go:121] error: InvalidParameterValue: [10.xx.xx.x] assigned, but move is not allowed.
    2024-07-12T00:35:34.687729288Z     status code: 400, request id: a4b09235-f20c-401e-a8e0-81bfadb30965, tried to assign IP '10.xx.xx.x' to interface: {
    2024-07-12T00:35:34.943199257Z E0712 00:35:34.943139       1 controller.go:165] error syncing '10.xx.xx.x': error assigning CloudPrivateIPConfig: "10.xx.xx.x" to node: "ip-10-xx-xx-xx.ec2.internal", err: InvalidParameterValue:    [10.xx.xx.x] assigned, but move is not allowed.
    

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content