cni: Kubernetes IPv6 problem on Docker 17.x

Hi, I am struggling with the following error when trying to deploy a Kubernetes 1.9.2 cluster with IPv6 networking.

kubelet[13358]: E0125 20:07:53.234698   13358 cni.go:259] Error adding network: failed to add IP addr {Version:6 Interface:0xc420014ae0 Address:{IP:fd00:1234:2000::13 Mask:ffffffffffffffff0000000000000000} Gateway:fd00:1234:2000::1} to "eth0": permission denied

The same error occurs on both master (for kube-dns) and worker nodes (for any other pod). Deploying a IPv4 kubernetes cluster with the CNI bridge driver works fine. I tried builing the latest CNI plugins from master but still got the same error.

OS: CentOS 7.4.1708 Kubernetes: 1.9.2 CNI: 0.6.0 Docker: 17.12.0.ce-1.el7.centos

/etc/cni/net.d/10-bridge-v6.conf:

{
  "cniVersion": "0.3.0",
  "name": "mynet",
  "type": "bridge",
  "bridge": "cbr0",
  "isDefaultGateway": true,
  "ipMasq": false,
  "hairpinMode": true,
  "ipam": {
    "type": "host-local",
    "ranges": [
      [
        {
          "subnet": "fd00:1234:2000::/64",
          "gateway": "fd00:1234:2000::1"
        }
      ]
    ]
  }
}

If you have any ideas on things to try it would be very much appreciated. Thanks!

About this issue

  • Original URL
  • State: closed
  • Created 6 years ago
  • Comments: 40 (6 by maintainers)

Commits related to this issue

Most upvoted comments

Releases are at https://github.com/containernetworking/plugins/releases; 0.7.4 is the latest. The plugins are also packaged downstream, but you’d have to ask whoever does that for the specific downstream project.

FYI: I downgraded to 17.03.2-ce and the IP address assignment is now working.