Bond interface fails during syncLink

[Tenebresus]

I'm currently trying to setup openvswitch, where I want to connect a bond interface to a bridge. But in the kernel logs I see the following error:

[talos] controller failed {"component": "controller-runtime", "controller": "network.LinkSpecController", "error": "1 error occurred:\n\t* error enslaving/unslaving link \"bond1\" under \"\": netlink receive: operation not supported\n\n"}

In the code I found the following function that is responsible for throwing this error:

talos/internal/app/machined/pkg/controllers/network/link_spec.go

Line 200 in 6a01437

func (ctrl *LinkSpecController) syncLink(ctx context.Context, r controller.Runtime, logger *zap.Logger, conn *rtnetlink.Conn, wgClient *wgctrl.Client,

Does anyone have any experience with attaching a bond interface to an openvswitch bridge? And can someone explain to me why Talos wants to enslave the bond interface under an empty master?
This is my network config for the bond interface:

        - interface: bond1
          dhcp: false
          bond:
            mode: 802.3ad
            lacpRate: fast
            xmitHashPolicy: layer3+4
            miimon: 100
            updelay: 200
            downdelay: 200
            interfaces:
              - enp94s0f1
              - enp94s0f0
          mtu: 9000

[smira]

Please run talosctl get linkspecs -o yaml and post it here.

[smira]

• You can ignore of course.
• You can configure bond1 without Talos, then it won't try to sync it.
• You can try to configure bridge with Talos, and explicitly make bond1 part of the bridge.

[Tenebresus]

The bond interface is currently down, so ignoring isnt really possible then? How would i configure the interface without talos?

[smira]

I guess Openvswitch can configure it? Some daemonset? Static pod?

I don't have the full picture here, and I don't know how much helpful I would be.

[WarriorXK]

Hi @smira, we are having a similar issue. Would it be possible to tell Talos to create the bond but ignore the enslave status during syncs?

[smira]

Not that I know about.

In order to move this forward, it might be nice to have a minimal reproducer for it, I guess we don't need bonds, just an interface (could be even dummy) which is configured by Talos, but enslaved under a bridge without Talos knowing about it (e.g. via kubectl debug pod and ip command).

Then we can see how to get this going.