search

cilium / cilium-cli

CLI to install, manage & troubleshoot Kubernetes clusters running Cilium
https://cilium.io
Apache License 2.0
417 stars 210 forks source link

Flow validation fails to get flows #230

Open jrajahalme opened 3 years ago

jrajahalme commented 3 years ago

Getting flows for one of the pods times out, while the flows returned for the destination pod show that flows matching the source pod actually exist. Check if this is an issue with flow filtering, or if we should simply try to get the flows for the source pod again after getting flows for the destination pod.

Example output:

🔌 [pod-to-pod] Testing cilium-test/client2-657df6649d-jj88h -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080...
---------------------------------------------------------------------------------------------------------------------
âś… curl command "curl -w %***local_ip***:%***local_port*** -> %***remote_ip***:%***remote_port*** = %***response_code***\n --show-error --silent --fail --show-error --connect-timeout 5 --output /dev/null 10.48.1.236:8080" succeeded
❌ Unable to retrieve flows of pod "cilium-test/client2-657df6649d-jj88h": timeout while waiting for condition, last error: no flows returned
âś… Flow validation successful for pod cilium-test/echo-other-node-646f4f6797-l2zc2 (first: 28, last: 42, matched: 3, nlog: 0)
đź“„ Flow logs of pod cilium-test/echo-other-node-646f4f6797-l2zc2:
âś…May 19 14:41:02.156: cilium-test/client2-657df6649d-jj88h:43794 -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080 from-endpoint FORWARDED (TCP Flags: SYN)
âť“May 19 14:41:02.156: cilium-test/client2-657df6649d-jj88h:43794 -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080 to-endpoint FORWARDED (TCP Flags: SYN)
âś…May 19 14:41:02.156: cilium-test/echo-other-node-646f4f6797-l2zc2:8080 -> cilium-test/client2-657df6649d-jj88h:43794 from-endpoint FORWARDED (TCP Flags: SYN, ACK)
âť“May 19 14:41:02.156: cilium-test/echo-other-node-646f4f6797-l2zc2:8080 -> cilium-test/client2-657df6649d-jj88h:43794 to-endpoint FORWARDED (TCP Flags: SYN, ACK)
âť“May 19 14:41:02.156: cilium-test/client2-657df6649d-jj88h:43794 -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080 from-endpoint FORWARDED (TCP Flags: ACK)
âť“May 19 14:41:02.156: cilium-test/client2-657df6649d-jj88h:43794 -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080 to-endpoint FORWARDED (TCP Flags: ACK)
âť“May 19 14:41:02.156: cilium-test/client2-657df6649d-jj88h:43794 -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080 from-endpoint FORWARDED (TCP Flags: ACK, PSH)
âť“May 19 14:41:02.156: cilium-test/client2-657df6649d-jj88h:43794 -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080 to-endpoint FORWARDED (TCP Flags: ACK, PSH)
âť“May 19 14:41:02.156: cilium-test/echo-other-node-646f4f6797-l2zc2:8080 -> cilium-test/client2-657df6649d-jj88h:43794 from-endpoint FORWARDED (TCP Flags: ACK)
âť“May 19 14:41:02.156: cilium-test/echo-other-node-646f4f6797-l2zc2:8080 -> cilium-test/client2-657df6649d-jj88h:43794 to-endpoint FORWARDED (TCP Flags: ACK)
âť“May 19 14:41:02.160: cilium-test/echo-other-node-646f4f6797-l2zc2:8080 -> cilium-test/client2-657df6649d-jj88h:43794 from-endpoint FORWARDED (TCP Flags: ACK, PSH)
âť“May 19 14:41:02.160: cilium-test/echo-other-node-646f4f6797-l2zc2:8080 -> cilium-test/client2-657df6649d-jj88h:43794 to-endpoint FORWARDED (TCP Flags: ACK, PSH)
âť“May 19 14:41:02.160: cilium-test/client2-657df6649d-jj88h:43794 -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080 from-endpoint FORWARDED (TCP Flags: ACK)
âť“May 19 14:41:02.160: cilium-test/client2-657df6649d-jj88h:43794 -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080 to-endpoint FORWARDED (TCP Flags: ACK)
âś…May 19 14:41:02.160: cilium-test/client2-657df6649d-jj88h:43794 -> cilium-test/echo-other-node-646f4f6797-l2zc2:8080 from-endpoint FORWARDED (TCP Flags: ACK, FIN)
❌ [pod-to-pod] cilium-test/client2-657df6649d-jj88h (10.48.1.57) -> cilium-test/echo-other-node-646f4f6797-l2zc2 (10.48.1.236)
github-actions[bot] commented 2 days ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.