Skip to content

CI: check-log-errors: Envoy: Version check failed #35228

@borkmann

Description

@borkmann

CI failure

Seen in latest main for ci-e2e-upgrade and ci-ipsec-upgrade:

https://github.com/cilium/cilium/actions/runs/11176792794

[...]
[=] [cilium-test-1] Test [check-log-errors] [104/104]
..
🔍 Collecting sysdump with cilium-cli version: fadbd668, args: [connectivity test --include-unsafe-tests --collect-sysdump-on-failure --include-conn-disrupt-test --conn-disrupt-test-restarts-path ./cilium-conn-disrupt-restarts --flush-ct --sysdump-hubble-flows-count=1000000 --sysdump-hubble-flows-timeout=5m --sysdump-output-filename cilium-sysdump-17-<ts> --junit-file cilium-junits/Setup & Test (17).xml --junit-property github_job_step=Run tests upgrade 2 (17) --secondary-network-iface=eth1 --expected-drop-reasons=+No egress gateway found]
🔮 Detected Cilium installation in namespace: "kube-system"
🔮 Detected Cilium operator in namespace: "kube-system"
ℹ️ Using default Cilium Helm release name: "cilium"
ℹ️ Failed to detect Cilium SPIRE installation - using Cilium namespace as Cilium SPIRE namespace: "kube-system"
🔍 Collecting Kubernetes nodes
  [-] Scenario [check-log-errors/no-errors-in-logs]
  [.] Action [check-log-errors/no-errors-in-logs/kind-kind/kube-system/cilium-operator-6d766f8ff7-l7tlw (cilium-operator)]
  [.] Action [check-log-errors/no-errors-in-logs/kind-kind/kube-system/cilium-cgkpc (cilium-agent)]
  ❌ Found 4 logs in kind-kind/kube-system/cilium-cgkpc (cilium-agent) matching list of errors that must be investigated:
time="2024-10-04T09:40:33Z" level=error msg="Envoy: Version check failed" error="envoy version b094128ed01b784b63ada19b54f8c7fdc3042e6e/1.29.9/Distribution/RELEASE/BoringSSL does not match with required version e3a7412f65722ebbe34254b3582b89d315765d0d" subsys=envoy-proxy (1 occurrences)
time=2024-10-04T09:40:33Z level=error msg="Timer job errored" module=agent.controlplane.envoy-proxy name=version-check func="envoy.registerEnvoyVersionCheck.func2 (pkg/envoy/cell.go:262)" error="envoy version b094128ed01b784b63ada19b54f8c7fdc3042e6e/1.29.9/Distribution/RELEASE/BoringSSL does not match with required version e3a7412f65722ebbe34254b3582b89d315765d0d" (1 occurrences)
time="2024-10-04T09:45:33Z" level=error msg="Envoy: Version check failed" error="envoy version b094128ed01b784b63ada19b54f8c7fdc3042e6e/1.29.9/Distribution/RELEASE/BoringSSL does not match with required version e3a7412f65722ebbe34254b3582b89d315765d0d" subsys=envoy-proxy (1 occurrences)
time=2024-10-04T09:45:33Z level=error msg="Timer job errored" module=agent.controlplane.envoy-proxy name=version-check func="envoy.registerEnvoyVersionCheck.func2 (pkg/envoy/cell.go:262)" error="envoy version b094128ed01b784b63ada19b54f8c7fdc3042e6e/1.29.9/Distribution/RELEASE/BoringSSL does not match with required version e3a7412f65722ebbe34254b3582b89d315765d0d" (1 occurrences)
🔮 Detected Cilium features: map[bpf-lb-external-clusterip:Disabled cidr-match-nodes:Disabled clustermesh-enable-endpoint-sync:Disabled cni-chaining:Disabled:none enable-bgp-control-plane:Disabled enable-envoy-config:Enabled enable-gateway-api:Disabled enable-ipsec:Disabled enable-ipv4-egress-gateway:Disabled enable-local-redirect-policy:Disabled endpoint-routes:Disabled ingress-controller:Enabled ipam:Disabled:cluster-pool ipv4:Enabled ipv6:Enabled mutual-auth-spiffe:Disabled wireguard-encapsulate:Disabled]

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/CIContinuous Integration testing issue or flakeci/flakeThis is a known failure that occurs in the tree. Please investigate me!

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions