gitlab-shared-secret* pod unable to talk to Kubernetes Server API when network policy of Bigbang 1.10 is enabled

We upgraded to bigbang 1.10. It seems in recent version some network policy have been added. This is the second related issue on network policy we have encounter so far.

Gitlab have a lot of components, one is about created pod like: gitlab-shared-secrets-8-akh-wx56n

The issue shows itself like this:

kubectl logs -n gitlab gitlab-shared-secrets-9-qth-rz6sw          
/tmp/tmp.SH5p4dTaJu /
Unable to connect to the server: dial tcp 10.43.0.1:443: i/o timeout
Unable to connect to the server: dial tcp 10.43.0.1:443: i/o timeout
Unable to connect to the server: dial tcp 10.43.0.1:443: i/o timeout
Unable to connect to the server: dial tcp 10.43.0.1:443: i/o timeout
Unable to connect to the server: dial tcp 10.43.0.1:443: i/o timeout
Unable to connect to the server: dial tcp 10.43.0.1:443: i/o timeout
Unable to connect to the server: dial tcp 10.43.0.1:443: i/o timeout

When we delete all the network policy in gitlab namespace it start to work!

We don't have customization from the default bigbang. We use RKE2 on AWS.

changed the description

added Big Bang Security gitlab kindbug labels

changed milestone to %1.11.0

changed iteration to Big Bang Iterations Jun 29, 2021 - Jul 12, 2021

changed the description

assigned to @kevin.wilder

Gitlab networkpolicies have been refactored with this MR
https://repo1.dso.mil/platform-one/big-bang/bigbang/-/merge_requests/604
Will be included in BigBang release 1.11.0
Closing this MR. Reopen if not resolved.

closed