Uploaded image for project: 'OpenShift Service Mesh'
  1. OpenShift Service Mesh
  2. OSSM-1168

Service Mesh sidecar injection not working reliably

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Minor
    • None
    • OSSM 2.0.0
    • Customer Impact, Maistra
    • None
    • False
    • None
    • False
    • Compatibility/Configuration, User Experience

    Description

      Description of problem:

      envoy sidecar is not injected into Pod(s) reliably when ossm resources are created in a single YAML file. but things are working as expected when those resources are created individually.

      How reproducible:

      100%

      Steps to Reproduce:

      • install services mesh operators which are required.
      • create smcp resource
      • create the smmr and deployment by below YAML

      apiVersion: v1
      kind: Namespace
      metadata:
        name: test

      apiVersion: maistra.io/v1
      kind: ServiceMeshMemberRoll
      metadata:
        name: default
        namespace: istio-system
      spec:
        members:
            - test

      apiVersion: apps/v1
      kind: Deployment
      metadata:
        name: centos8
        namespace: test
      spec:
        progressDeadlineSeconds: 600
        replicas: 1
        revisionHistoryLimit: 10
        selector:
          matchLabels:
            deployment: centos8
        strategy:
          rollingUpdate:
            maxSurge: 25%
            maxUnavailable: 25%
          type: RollingUpdate
        template:
          metadata:
            annotations:
              openshift.io/generated-by: OpenShiftNewApp
              sidecar.istio.io/inject: "true"
            creationTimestamp: null
            labels:
              deployment: centos8
          spec:
            containers:
              - image: centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc
                imagePullPolicy: IfNotPresent
                name: centos8
                args:
                  - sleep
                  - inf
                resources: {}
                terminationMessagePath: /dev/termination-log
                terminationMessagePolicy: File
            dnsPolicy: ClusterFirst
            restartPolicy: Always
            schedulerName: default-scheduler
            securityContext: {}
            terminationGracePeriodSeconds: 30

       

      Actual results:

       oc get po
      NAME                      READY   STATUS    RESTARTS   AGE
      centos8-d74994b68-fzpfz   1/1     Running   0          29s

       oc describe po | grep -i container | grep -i created
       Normal  Created         29s   kubelet            Created container centos8

      oc delete po centos8-d74994b68-fzpfz
      pod "centos8-d74994b68-fzpfz" deleted

      oc get po
      NAME                      READY   STATUS    RESTARTS   AGE
      centos8-d74994b68-8sczg   2/2     Running   0          78s

      oc describe po | grep -i container | grep -i created
      Normal  Created         71s   kubelet            Created container centos8
      Normal  Created         68s   kubelet            Created container istio-proxy

       

      Expected: envoy sidecar is injected reliably into Pod(s) when the Pod(s) are created

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              rhn-support-atn Anand T N (Inactive)
              Votes:
              3 Vote for this issue
              Watchers:
              14 Start watching this issue

              Dates

                Created:
                Updated: