minio / kes

Key Managament Server for Object Storage and more
https://min.io/docs/kes/concepts/
GNU Affero General Public License v3.0
456 stars 95 forks source link

Regression: Vault log spam #398

Closed dhess closed 8 months ago

dhess commented 11 months ago

Bug describtion

Once per minute, per Kes instance, Kes generates the following log spam in Vault:

{"@level":"info","@message":"http: TLS handshake error from 10.20.3.20:48816: EOF","@timestamp":"2023-10-02T18:27:23.366012Z"}

Everything else is working fine — Kes is able to get keys from Vault.

This appears to be a regression to #230.

Expected behavior

No Vault log spam.

Additional context

MinIO is installed in our Kubernetes cluster via the operator and tenant Helm charts, v5.0.9. The Vault service is in the same cluster and using the vault-active service with the KV v2 engine and Kubernetes auth.

Nowheresly commented 11 months ago

We experience the same spam behavior.

zveinn commented 10 months ago

There was a big refactor of the internals of this repository a few days ago: https://github.com/minio/kes/commit/0e49f95c93318a32c2c49ee996449ee5cb5ce534

Please test the latest release and let us know if this spam still persists.