Open nickjameswebb opened 3 years ago
/assign
The test is trying to create a proxy service to test the visibility and that service proxies points to an ExternalName
k8s Service pointing to the local gateway defined in ingress.Status.PrivateLoadBalancer.Ingress[0].DomainInternal
. In the case pure mesh, this field doesn't exists so the test tries to create a invalid service (empty ExternalName
):
privateLoadBalancer:
ingress:
- meshOnly: true
In the case of pure mesh, we don't need the ExternalName Service pointing to the (non-existent) local gateway. The test needs to be tweaked to take this into account.
That makes sense. I've tried removing the call to create the ExternalName
service, and the result is a DNS lookup error for the generated private hostnames in the test like:
lookup ingress-conformance-0-visibility-cpjkeznv.serving-tests.svc.cluster.local on 10.96.0.10:53: no such host
It seems like fixing this test will require some additional DNS configuration or creating an Istio ServiceEntry
for the private hostname.
Note: I've disabled conformance tests in mesh mode in #583
We'll want to re-enable those once this is fixed
This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen
. Mark the issue as
fresh by adding the comment /remove-lifecycle stale
.
Just note, we still haven't enabled conformance test on mesh mode. However, ambient can pass all conformance test.
This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen
. Mark the issue as
fresh by adding the comment /remove-lifecycle stale
.
/reopen /lifecycle frozen
@dprotaso: Reopened this issue.
/unassign @JRBANCEL
@ReToCode @dprotaso is this still valid given that the mesh option was removed in https://github.com/knative-extensions/net-istio/pull/915? Am I missing something here?
I think the repro steps are not the same but mesh is still pretty flakey with serving tests
https://testgrid.k8s.io/r/knative-own-testgrid/serving#istio-latest-mesh
We should investigate
Expected Behavior
Networking conformance tests pass for a Knative Serving + Istio + net-istio (mesh mode enabled) cluster.
Actual Behavior
This test fails with an error like:
Steps to Reproduce the Problem
configmap/config-istio
.Additional Info
I have seen this fail with two different configurations:
Let me know if this issue should be filed with the networking conformance tests. It doesn't seem like this test will ever succeed because the generated private hostname will never resolve to anything while in mesh mode (the
spec.ExternalName
error is just covering up this real issue).Thanks very much!