Skip to content

cilium-cli: Add envoy log pattern in error check #36498

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 6, 2025

Conversation

sayboras
Copy link
Member

Cilium Envoy might be running as Daemonset mode, which will have its own log format. Just a note that cilium-envoy logs are already retrieved as part of label selector app.kubernetes.io/part-of=cilium.

Relates: #36259

@maintainer-s-little-helper maintainer-s-little-helper bot added the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Dec 11, 2024
@sayboras sayboras requested a review from marseel December 11, 2024 04:53
@github-actions github-actions bot added cilium-cli This PR contains changes related with cilium-cli cilium-cli-exclusive This PR only impacts cilium-cli binary labels Dec 11, 2024
@sayboras sayboras added release-note/ci This PR makes changes to the CI. and removed cilium-cli This PR contains changes related with cilium-cli cilium-cli-exclusive This PR only impacts cilium-cli binary labels Dec 11, 2024
@maintainer-s-little-helper maintainer-s-little-helper bot removed the dont-merge/needs-release-note-label The author needs to describe the release impact of these changes. label Dec 11, 2024
@sayboras sayboras marked this pull request as ready for review December 11, 2024 07:02
@sayboras sayboras requested review from a team as code owners December 11, 2024 07:02
@sayboras sayboras added cilium-cli This PR contains changes related with cilium-cli cilium-cli-exclusive This PR only impacts cilium-cli binary labels Dec 11, 2024
Copy link
Contributor

@marseel marseel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, looks great 🚀

@julianwiedmann julianwiedmann removed their request for review December 13, 2024 08:49
@sayboras
Copy link
Member Author

/test

@sayboras sayboras enabled auto-merge December 13, 2024 12:25
@sayboras
Copy link
Member Author

Seems like this PR surfaces an existing issue, which we need to check before proceed. Marking this as draft.

 Error: 2-13 13:04:43.368][15][error][misc] [./cilium/network_policy.h:115] PolicyInstance: Destructor executing in a worker thread, while only main thread should destruct xDS resources (6 occurrences)
Error: 2-13 13:04:43.358][15][error][config] [cilium/network_policy.cc:612] PortNetworkPolicyRules: Destructor executing in a worker thread, while only main thread should destruct xDS resources (1 occurrences)
Error: 2-13 13:04:43.366][15][error][config] [cilium/network_policy.cc:612] PortNetworkPolicyRules: Destructor executing in a worker thread, while only main thread should destruct xDS resources (1 occurrences)
Error: 2-13 13:04:43.366][15][error][misc] [./cilium/network_policy.h:115] PolicyInstance: Destructor executing in a worker thread, while only main thread should destruct xDS resources (1 occurrences)
Error: 2-13 13:04:43.367][15][error][config] [cilium/network_policy.cc:612] PortNetworkPolicyRules: Destructor executing in a worker thread, while only main thread should destruct xDS resources (1 occurrences)
Error: 2-13 13:04:43.368][15][error][config] [cilium/network_policy.cc:612] PortNetworkPolicyRules: Destructor executing in a worker thread, while only main thread should destruct xDS resources (9 occurrences)

@sayboras sayboras added the dont-merge/preview-only Only for preview or testing, don't merge it. label Dec 15, 2024
sayboras added a commit that referenced this pull request Dec 19, 2024
Each stable releases might run with different cilium/proxy versions,
which might cause below error logs during upgrade/downgrade tests. This
commit is to disable such validation, as any incompatibility issue will
trigger connectivity failure. Additionally, any error logs in cilium
envoy pod will be checked after #36498 is merged.

```
 time=2024-12-19T15:02:09Z level=error msg="Timer job errored" module=agent.controlplane.envoy-proxy name=version-check func="envoy.registerEnvoyVersionCheck.func2 (pkg/envoy/cell.go:279)" error="envoy version 3a8ccd54545785689e677d785b69025d1d4b33de/1.31.4/Distribution/RELEASE/BoringSSL does not match with required version fff09f16c2c269b22509c86dfc1d3e8f52eb3857" (1 occurrences)
```

Signed-off-by: Tam Mach <tam.mach@cilium.io>
github-merge-queue bot pushed a commit that referenced this pull request Dec 19, 2024
Each stable releases might run with different cilium/proxy versions,
which might cause below error logs during upgrade/downgrade tests. This
commit is to disable such validation, as any incompatibility issue will
trigger connectivity failure. Additionally, any error logs in cilium
envoy pod will be checked after #36498 is merged.

```
 time=2024-12-19T15:02:09Z level=error msg="Timer job errored" module=agent.controlplane.envoy-proxy name=version-check func="envoy.registerEnvoyVersionCheck.func2 (pkg/envoy/cell.go:279)" error="envoy version 3a8ccd54545785689e677d785b69025d1d4b33de/1.31.4/Distribution/RELEASE/BoringSSL does not match with required version fff09f16c2c269b22509c86dfc1d3e8f52eb3857" (1 occurrences)
```

Signed-off-by: Tam Mach <tam.mach@cilium.io>
sayboras added a commit that referenced this pull request Dec 19, 2024
[ upstream commit 4a461ae ]

Each stable releases might run with different cilium/proxy versions,
which might cause below error logs during upgrade/downgrade tests. This
commit is to disable such validation, as any incompatibility issue will
trigger connectivity failure. Additionally, any error logs in cilium
envoy pod will be checked after #36498 is merged.

```
 time=2024-12-19T15:02:09Z level=error msg="Timer job errored" module=agent.controlplane.envoy-proxy name=version-check func="envoy.registerEnvoyVersionCheck.func2 (pkg/envoy/cell.go:279)" error="envoy version 3a8ccd54545785689e677d785b69025d1d4b33de/1.31.4/Distribution/RELEASE/BoringSSL does not match with required version fff09f16c2c269b22509c86dfc1d3e8f52eb3857" (1 occurrences)
```

Signed-off-by: Tam Mach <tam.mach@cilium.io>
sayboras added a commit that referenced this pull request Dec 20, 2024
[ upstream commit 4a461ae ]

Each stable releases might run with different cilium/proxy versions,
which might cause below error logs during upgrade/downgrade tests. This
commit is to disable such validation, as any incompatibility issue will
trigger connectivity failure. Additionally, any error logs in cilium
envoy pod will be checked after #36498 is merged.

```
 time=2024-12-19T15:02:09Z level=error msg="Timer job errored" module=agent.controlplane.envoy-proxy name=version-check func="envoy.registerEnvoyVersionCheck.func2 (pkg/envoy/cell.go:279)" error="envoy version 3a8ccd54545785689e677d785b69025d1d4b33de/1.31.4/Distribution/RELEASE/BoringSSL does not match with required version fff09f16c2c269b22509c86dfc1d3e8f52eb3857" (1 occurrences)
```

Signed-off-by: Tam Mach <tam.mach@cilium.io>
github-merge-queue bot pushed a commit that referenced this pull request Dec 23, 2024
[ upstream commit 4a461ae ]

Each stable releases might run with different cilium/proxy versions,
which might cause below error logs during upgrade/downgrade tests. This
commit is to disable such validation, as any incompatibility issue will
trigger connectivity failure. Additionally, any error logs in cilium
envoy pod will be checked after #36498 is merged.

```
 time=2024-12-19T15:02:09Z level=error msg="Timer job errored" module=agent.controlplane.envoy-proxy name=version-check func="envoy.registerEnvoyVersionCheck.func2 (pkg/envoy/cell.go:279)" error="envoy version 3a8ccd54545785689e677d785b69025d1d4b33de/1.31.4/Distribution/RELEASE/BoringSSL does not match with required version fff09f16c2c269b22509c86dfc1d3e8f52eb3857" (1 occurrences)
```

Signed-off-by: Tam Mach <tam.mach@cilium.io>
@sayboras sayboras removed the dont-merge/preview-only Only for preview or testing, don't merge it. label Jan 6, 2025
Cilium Envoy might be running as Daemonset mode, which will have its own
log format. Just a note that cilium-envoy logs are already retrieved as
part of label selector app.kubernetes.io/part-of=cilium.

Relates: #36259
Signed-off-by: Tam Mach <tam.mach@cilium.io>
@sayboras sayboras force-pushed the pr/tammach/envoy-ds-log-check branch from a6d4091 to a7ce8af Compare January 6, 2025 22:13
@sayboras
Copy link
Member Author

sayboras commented Jan 6, 2025

/test

@sayboras sayboras added this pull request to the merge queue Jan 6, 2025
@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Jan 6, 2025
Merged via the queue into main with commit e857b90 Jan 6, 2025
216 checks passed
@sayboras sayboras deleted the pr/tammach/envoy-ds-log-check branch January 6, 2025 23:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cilium-cli This PR contains changes related with cilium-cli cilium-cli-exclusive This PR only impacts cilium-cli binary ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/ci This PR makes changes to the CI.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants