[Oracle Cloud Infra] IP Tables is set to restrict all traffic

[Peter Jose De Sousa]

Hi,

This is to document issues related to deploying Charmed Kubernetes on Oracle Cloud Infrastructure (OCI).

With reference to http://paste.ubuntu.com/p/hR3fJ8Rxhd/ - by default all ports except NTP and SSH are blocked by default.

A suggestioned resolution to this would be possibly some charm that configures IP tables to allow K8s related traffic for the infrastructure nodes.

Cheers,

Peter

[George Kraft (cynerva)]

The charms are built around the assumption that units are able to communicate with eachother via the ingress addresses returned by Juju's network-get tool. From your report, it sounds like that assumption is not true on Oracle cloud infrastructure.

I believe this is something that needs to be addressed by the Juju team or fixed in Juju, not the charms.

[Pen Gale (pengale)]

I think that, rather than having this handled on the charm level, Juju should do work to ensure that charms are able to work as expected on the OCI provider.

This is tagged w/ oracle provider. Triaging as medium, to be escalated if folks feel that it is necessary to swap this into the roadmap for this cycle.

[Canonical Juju QA Bot (juju-qa-bot)]

This bug has not been updated in 2 years, so we're marking it Low importance. If you believe this is incorrect, please update the importance.