Federico Paolinelli

Hi @danehans , trying to revamp this to understand better. Do you envision metallb to provide support for both the Gateway object and to TCP / UDP Routes? I just...

> I think you've got the correct understanding @fedepaol. Essentially, GatewayAPI replaces service `type=LoadBalancer` using a combination of `GatewayClass`, `Gateway`, `TCP/UDP Route` (or HTTP/TLS Route for a L7 controller). I...

> I think this would only make sense for MetalLB if we can still make use of the underlying network provider for the "last mile" (forwarding to the right nodes...

The solution to this issue is to have multiple services sharing the same set of endpoints. Doing this is functionally equivalent to having a service with the two ips. The...

@web-engineer can you confirm that the data field of `webhook-server-cert` is empty? I think that's the key. The way it works is, we have this component in the controller that...

Also, despite the symptoms being the same, it may be a different issue. Can you set the logs of the controller to debug (-loglevel debug) and send them over?

In @MykolaBordakov 's logs I see ``` {"level":"info","ts":1658940727.201935,"logger":"cert-rotation","msg":"Ensuring CA cert","name":"metallb-webhook-configuration","gvk":"admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration","name":"metallb-webhook-configuration","gvk":"admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration"} {"level":"info","ts":1658940727.2072318,"logger":"cert-rotation","msg":"Ensuring CA cert","name":"addresspools.metallb.io","gvk":"apiextensions.k8s.io/v1, Kind=CustomResourceDefinition","name":"addresspools.metallb.io","gvk":"apiextensions.k8s.io/v1, Kind=CustomResourceDefinition"} {"level":"info","ts":1658940727.2150514,"logger":"cert-rotation","msg":"Ensuring CA cert","name":"bgppeers.metallb.io","gvk":"apiextensions.k8s.io/v1, Kind=CustomResourceDefinition","name":"bgppeers.metallb.io","gvk":"apiextensions.k8s.io/v1, Kind=CustomResourceDefinition"} {"level":"info","ts":1658940727.227721,"logger":"cert-rotation","msg":"Ensuring CA cert","name":"metallb-webhook-configuration","gvk":"admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration","name":"metallb-webhook-configuration","gvk":"admissionregistration.k8s.io/v1, Kind=ValidatingWebhookConfiguration"} {"level":"info","ts":1658940727.2334685,"logger":"cert-rotation","msg":"Ensuring CA cert","name":"addresspools.metallb.io","gvk":"apiextensions.k8s.io/v1,...

can you also check the validatingwebhookconfiguration content? k get validatingwebhookconfiguration -o yaml

Yep, they seem to be two different issues. In @web-engineer it seems the controller is not able to reach the api server, which is preventing it to patch the webhook....

@MykolaBordakov just triple checking, because I am finishing ideas. Do you get the error even after minutes you deployed metallb? Just checking if you got the error only during the...