gateway is missing from docker inspect

[pdaigle]

#For bug reports, please include the information below:

VIC version:

Different results for release 1.1.1 and build 13118

Deployment details:

./vic-machine-linux create --target vcsa-01a.corp.local --user administrator@corp.local --compute-resource RegionA01-COMP01 --image-store RegionA01-ISCSI01-COMP01 --volume-store RegionA01-ISCSI01-COMP01:default --public-network VM-RegionA01-vDS-COMP --container-network VM-RegionA01-vDS-COMP:routable --bridge-network Bridge02-RegionA01-vDS-COMP --name virtual-container-host-13118 --registry-ca=/etc/docker/certs.d/registry.corp.local/ca.crt --no-tls --thumbprint=F7:68:F0:93:F4:EC:B7:FE:C1:02:00:00:AB:62:1A:50:E8:9A:0E:85

Steps to reproduce:

Provision a container attached to an external container-network ("routable" in the example above) using DHCP. Gateway is not populated when displaying "docker inspect" and container is not available on the network.

docker run -d --net routable httpd

on 1.1.1:

on build-13118:

Actual behavior:

1.1.1 behaves as expected, connecting the container to the external network and the service on port 80 is reachable.

build-13118 has some missing information in docker inspect (see "Gateway" field) and the service is not available, even on the same network.

Expected behavior:

Expect same behavior between releases for container-network.

Logs:

Additional details as necessary:

I can reproduce in my lab and gather more information if needed.

[willsherwood]

As documented here, when configuring container networks to use vSphere portgroups, a level of trust can be configured. The default from 1.1 to 1.2 has changed from open to published. This means that by default, if you want to access a port group's "80" port, you need to supply -p 80 to the docker create/run command.

This is unrelated to the fact that the gateway is no longer populated in the network endpoint.

You should be able to either add --container-network-firewall routable:open to make the routable network completely open on all ports, or add -p 80 to docker run to specifically open port 80 on the port group.

[stuclem]

Thanks @willsherwood, this definitely needs to be documented. Opened https://github.com/vmware/vic-product/issues/575 for the doc.

[mdubya66]

after talking to @pdaigle the gateway works but is missing from the inspect output. adding kind/note