Jesse Bye

@ilrudie possibly, although we have been using Ambient since 1.23.0 and haven't had a problem with previous minor version updates across several clusters. I'm trying to reproduce the issue with...

@jaellio Yes, some nodes are fine while others are not. Config on the nodes is all the same. I am thinking more and more it feels like a race condition....

@keithmattix I dialed up the logs for ztunnel and istio-cni-node to debug, but didn't observe anything new from what I originally posted: istio-cni-node: ``` 2024-11-11T19:05:41.843416Z error cni-agent failed to add...

@jaellio no, those were without setting `privileged` to true. I can try to see if we can test with `privileged: true` but it's a little tricky because the Helm chart...

Having trouble replicating this consistently, and need to move on to other things for a bit - if I see it happen again I will post back here! For now,...

@jljaco This may help some other folks using ArgoCD: we found that using the background finalizer resolves this problem. The documentation is a bit lacking, but after some experimentation, we...

/remove-lifecycle rotten

Thanks @crohr. I'll see if we can update the action to do a retry with exponential backoff. Or maybe even bake a custom AMI that has the apt package pre-installed...

@crohr is there a way to disable using SSM agent altogether? Also, maybe relevant: [this Stack Exchange thread](https://unix.stackexchange.com/questions/315502/how-to-disable-apt-daily-service-on-ubuntu-cloud-vm-image) mentions that Ubuntu has an `apt-daily.service` daemon that will run right after...

+1