Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

envoy: periodic version-check with hive timer job #29513

Merged

Conversation

mhofstetter
Copy link
Member

@mhofstetter mhofstetter commented Nov 30, 2023

With the introduction of the Envoy DaemonSet mode, the Envoy version check has changed from failing the Cilium Agent at startup to a check that write an error message in case of a version missmatch (or error retrieving the Envoy version).

The reason was that the Envoy DaemonSet Pod might not be ready when the Cilium Agent performs the version check.

This commit introduces a hive timer job that periodically checks the Envoy version (every 5min (currently hardcoded)). This has the advantage that Envoy version changes during the uptime of the agent are detected (in case the DaemonSet gets deployed with a different version). In addition, any error gets reported via Cilium health reporter.

@mhofstetter mhofstetter added kind/enhancement This would improve or streamline existing functionality. area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. release-note/misc This PR makes changes that have no direct user impact. labels Nov 30, 2023
@mhofstetter mhofstetter requested a review from a team as a code owner November 30, 2023 16:13
With the introduction of the Envoy DaemonSet mode, the Envoy version
check has changed from failing the Cilium Agent at startup to a check
that write an error message in case of a version mismatch (or error
retrieving the Envoy version).

The reason was that the Envoy DaemonSet Pod might not be ready when the
Cilium Agent performs the version check.

This commit introduces a hive timer job that periodically checks the
Envoy version (every 5min). This has the advantage that the version
gets checked periodically (in case the daemonset gets deployed with a
different version). In addition, any error gets reported via Cilium
health reporter.

Signed-off-by: Marco Hofstetter <marco.hofstetter@isovalent.com>
@mhofstetter mhofstetter force-pushed the pr/mhofstetter/envoy-periodic-version-check branch from b7f0db6 to 12e8b03 Compare November 30, 2023 16:14
@mhofstetter
Copy link
Member Author

/test

Copy link
Member

@pippolo84 pippolo84 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice, thanks! 💯

@maintainer-s-little-helper maintainer-s-little-helper bot added the ready-to-merge This PR has passed all tests and received consensus from code owners to merge. label Nov 30, 2023
@aanm aanm added this pull request to the merge queue Dec 1, 2023
Merged via the queue into cilium:main with commit 4e0b78d Dec 1, 2023
41 of 42 checks passed
@mhofstetter mhofstetter deleted the pr/mhofstetter/envoy-periodic-version-check branch December 1, 2023 13:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/proxy Impacts proxy components, including DNS, Kafka, Envoy and/or XDS servers. kind/enhancement This would improve or streamline existing functionality. ready-to-merge This PR has passed all tests and received consensus from code owners to merge. release-note/misc This PR makes changes that have no direct user impact.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants