New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
NodePort health checks should be disabled when kube-proxy is installed #16477
NodePort health checks should be disabled when kube-proxy is installed #16477
Conversation
The first part of the message says the error happens when running with kube-proxy, but the second part only recommends to disable health checks if running with KPR=partial. My own tests also show this error can happen when KPR=strict and kube-proxy is installed. Signed-off-by: Paul Chaignon <paul@cilium.io>
In the 4.19 CI job, we run with KPR=strict for most tests even though kube-proxy is installed. As a result, we get an error message because the agent fails to listen on the health checks port. In that setup, we should instead disable health checks. Signed-off-by: Paul Chaignon <paul@cilium.io>
test-me-please |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks, LGTM!
Asking @gandro to review it as well, as he might have more context for this feature.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good! At first I was a bit confused, since the flag shouldn't do anything if KPR is turned off, but looks like in that test we have both KPR and KP enabled.
Edit: I guess I could have also read the commit messages. Thanks!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, thanks for the context in commit message.
cilium#16477 was merged and a new error, cilium#16402 (comment) was discovered since the PR disallowing level=error in CI was merged. Signed-off-by: Paul Chaignon <paul@cilium.io>
#16477 was merged and a new error, #16402 (comment) was discovered since the PR disallowing level=error in CI was merged. Signed-off-by: Paul Chaignon <paul@cilium.io>
See commit descriptions.