Application routes suffer more unavailability than expected during OVN live migration if there are networkpolicies
Issue
-
During a live migration from OpenShift SDN to OVN-Kubernetes, application routes are facing more unavailability than expected.
-
The following conditions are met (otherwise, this solution doesn't apply)
-
The ingress controller used to expose the application route uses the
HostNetwork
endpoint publishing strategy. -
The application allows the traffic from the ingress controller via a networkpolicy similar to the allow-from-router or allow-from-hostnetwork documented ones
-
Environment
- Red Hat OpenShift Container Platform 4.16
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.