Keith Mattix II
Keith Mattix II
I couldn't reproduce this bug in the ads integration test @adisuissa linked, I think because the streams are fake (can't send a goaway). That being said, this still could be...
The test is here if folks want to double check me: https://github.com/keithmattix/envoy/commit/d3c3e48cc3f750c55bb291240e066798a6f11151#diff-527517d4e9ea7abd055b4e4f80e4d2ed3af812e8b983e175f2c3d784a5bb7cbbR582
I think the issue here is NACKs that result in permanently warming clusters. I'm still learning the xDS details, but here's my current theory of what's happening: 0. This assumes...
/cc @adisuissa have you had a chance to take a look at this yet?
Is there an RDS entry before the ServiceEntry is created? I'd be surprised if so; #49403 just merged and fixed a bug preventing the RDS entry from being added
Would it be possible for you to try a nightly build containing https://github.com/istio/istio/pull/49403? I think it may potentially fix this
If you can't I can try to repro next week
Hmm I could also reproduce this in 1.19.0, before any of the wildcard host changes occurred. Can you confirm that you run into this behavior with 1.19.0?
Maybe try an HTTPS protocol for port 443?
Can you turn on debug/trace logs for the client sidecar to see if you get more hints at the particular error?