Open haf opened 3 years ago
Ping
Same issue on my side. If i enable istio injection, logical backup fails to reach api server
logical-backup-1-1623371400-t9cc2 % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (7) Failed to connect to 10.100.200.1 port 443: Connection refused
Problem found. Envoy proxy is starting faster than logical backup pod. Setting values.global.proxy.holdApplicationUntilProxyStarts into isitooperator solves the problem.
When you're using sidecars that use iptables to intercept traffic, the logical backup is failing. Normally, I can configure an operator with a
k8s
section that overrides theargs
to wait on the Istio sidecar proxy to be up and responsive, but I haven't found a way except rebuilding the image, to do that here. This means the logical backups fail when trying to contact the k8s API server (connection refused), and there are no retries implemented (which would be another solution).Solutions thus could be;
Refs