Karl Stoney
Karl Stoney
@chlunde that isn't enough, unfortunately. If you check my envoyfitler filter above you also need to strip the upgrade header out using a lua filter on request. That was the...
Given that more people are now upgrading their clients this was becoming more of an issue for us, we decided to deploy the envoyfilter to handle this. All seemed well...
The envoyfilter backfired hard for us and we ended up removing it. It has some funky interactions with tls origination that we couldn't work out so as it stands, it...
@keithmattix shall we reopen this given it isn't stale it's just pending https://github.com/envoyproxy/envoy/pull/37642#discussion_r1913606083
 Same here. Pet just shows permanently away, app shows correctly. No logs in HA indicating any issues
Do you mean in istiod's validator so it's rejected by the apiServer if invalid?
By extension to this I just messed up an envoyfilter ``` spec: configPatches: - applyTo: HTTP_FILTER match: context: SIDECAR_OUTBOUND listener: filterChain: filter: name: envoy.filters.network.http_connection_manager subFilter: name: envoy.filters.http.router patch: operation: INSERT_BEFORE...
As a mitigation, i've removed the shutdown hook from our injection template. We already have some reasonable guards to aid with graceful shutdowns that have historically worked _ok_ for us.
No, the prestop hook to drain is only added when native sidecars is enabled
If that is true then yes, it is a problem there too. The reason I might not have seen it historically is for years we've had a `pilot-agent` wrapper script...