skupperproject / skupper

Skupper is an implementation of a Virtual Application Network, enabling rich hybrid cloud communication.
http://skupper.io
Apache License 2.0
559 stars 71 forks source link

Communication is not possible when exposing sts in a namespace other than the namespace where skupper is installed. #1497

Open hyowonlee opened 1 month ago

hyowonlee commented 1 month ago

Describe the bug Headless services that are not in the namespace where skupper is deployed do not seem to communicate.

How To Reproduce skupper is installed in the "default" namespace on both clusters 1 and 2.

I exposed mysql sts in "my" namespace in cluster1

###(cluster1)
skupper expose statefulset mycluster --headless --port 3306 --targetnamespace my

So, skupper service was created in the default namespace in both cluster1 and cluster2.

And I tried to access cluster1 mysql through skupper headless service in mysqlsh pod on cluster2, but it failed.

MySQL  SQL > \connect root@mycluster-0.mycluster-instances.default
Creating a session to 'root@mycluster-0.mycluster-instances.default'
Please provide the password for 'root@mycluster-0.mycluster-instances.default': ****
MySQL Error 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: 0

Expected behavior It works normally when used with sts deployed in the default namespace where skupper is deployed. Like this, it seems that headless service communication should be possible even in namespaces where skupper is not deployed.

Environment details