How to know when Antrea support should be engaged

Products

• VMware NSX

Issue/Introduction

This article provides guidance on when a case should be opened or transferred to the Antrea support team

Resolution

The following conditions must be met in order to qualify a case as needing support from the Antrea team:

1. The customer's environment is experiencing network related issue with Containers/Kubernetes.
2. The Cluster Networking Interface (CNI) in use within the affected environment is Antrea.

Note: You can determine if Antrea is deployed by running a command similar to the following:
 

kubectl get po -A -o=jsonpath='{range .items[*]}{..metadata.name}{": "}{.spec.containers[*].image}{"\n"}{"\n"}' |grep -i antrea

This command lists the pod names and images used by the containers in the pods, where either has "antrea" in them. You should see at least one line of output. Output should look similar to the following:

antrea-agent-2b5kd: projects.registry.vmware.com/tkg/antrea/antrea-debian@sha256:8a4c3f719bec5eb3d6b4a73fc8156a8d7137418f7788ae29b1226f820df1b102 projects.registry.vmware.com/tkg/antrea/antrea-debian@sha256:8a4c3f719bec5eb3d6b4a73fc8156a8d7137418f7788ae29b1226f820df1b102

3. The Antrea image binaries are signed by VMware.

Note: You can run a command similar to the one used in Step 2 as it shows the pod names and the image(s) used to build the containers in the pod. If the image repository/name and tag/version is similar to either of the following, it is signed by VMware:
 

projects.registry.vmware.com/tkg/antrea/antrea-debian@sha256:8a4c3f719bec5eb3d6b4a73fc8156a8d7137418f7788ae29b1226f820df1b102

 

registry.tkg.vmware.run/antrea/antrea-debian:v0.9.3_vmware.1

In the first example, the image tag/version is a hash but the image repository is projects.registry.vmware.com, indicating that it was provided by VMware (and also signed by VMware).
In the second example, the image tag/version is v0.9.3_vmware.1, indicating that is is signed by VMware.

If the Atrea image binaries are not signed by VMware, the image repository/name and tag/version might look similar to the following:
 

antrea/antrea-ubuntu:v1.5.0
 

4. The issue is impacting an Antrea feature :

Antrea provides the following functionality:

• Pod Connectivity
• Service type : clusterIP
• Service Type: NodePort
• Network Policies

Antrea does not provide the following functionality:

• Service type: LoadBalancer
• Cluster ingress

Additional Information

Tanzu Kubernetes Cluster Networking
Tanzu Kubernetes Grid Networking
Install Tanzu Kubernetes Grid Integrated Edition on vSphere Using Ops Manager (Antrea and Flannel Networking)
Installing Tanzu Kubernetes Grid Integrated Edition on Google Cloud Platform (GCP)
Installing Tanzu Kubernetes Grid Integrated Edition on Amazon Web Services (AWS)
Installing Tanzu Kubernetes Grid Integrated Edition on Microsoft Azure