We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
In a dual-stack Kubernetes environment the health checks default to probing via IPv6. The container nginx only listens on IPv4 by default.
[tiredofit/self-service-password 12:30:57 /] $ netstat -nltp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:9000 0.0.0.0:* LISTEN - tcp 0 0 0.0.0.0:73 0.0.0.0:* LISTEN 3139/nginx: master tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 3139/nginx: master tcp 0 0 :::8050 :::* LISTEN - tcp 0 0 :::10050 :::* LISTEN -
From inside the container:
bash-5.1# curl http://[::1]:80/ curl: (7) Failed to connect to ::1 port 80 after 0 ms: Couldn't connect to server
Returns 200 OK.
Dual-Stack Kubernetes (k3s) using a helm chart:
https://github.com/jp-gouin/helm-openldap
Not sure if it's the correct solution, but adding listen [::]:80 ipv6only=off; to the nginx server config.
listen [::]:80 ipv6only=off;
The text was updated successfully, but these errors were encountered:
fix: Allow IPv6 on ltb-passwd
5b2d4b0
* Listen on both IPv4 and IPv6 in the ltb-passwd to fix health probes on dual-stack clusters. * Include upstream chart env in main values.yaml. tiredofit/docker-self-service-password#66 Signed-off-by: SuperQ <[email protected]>
No branches or pull requests
Summary
In a dual-stack Kubernetes environment the health checks default to probing via IPv6. The container nginx only listens on IPv4 by default.
Steps to reproduce
From inside the container:
What is the expected correct behavior?
Returns 200 OK.
Relevant logs and/or screenshots
Environment
Dual-Stack Kubernetes (k3s) using a helm chart:
https://github.com/jp-gouin/helm-openldap
Possible fixes
Not sure if it's the correct solution, but adding
listen [::]:80 ipv6only=off;
to the nginx server config.The text was updated successfully, but these errors were encountered: