-
Bug
-
Resolution: Can't Do
-
Minor
-
None
-
OSSM 2.0.0
-
None
-
False
-
None
-
False
-
Compatibility/Configuration, User Experience
-
Description of problem:
envoy sidecar is not injected into Pod(s) reliably when ossm resources are created in a single YAML file. but things are working as expected when those resources are created individually.
How reproducible:
100%
Steps to Reproduce:
- install services mesh operators which are required.
- create smcp resource
- create the smmr and deployment by below YAML
apiVersion: v1
kind: Namespace
metadata:
name: test
—
apiVersion: maistra.io/v1
kind: ServiceMeshMemberRoll
metadata:
name: default
namespace: istio-system
spec:
members:
- test
—
apiVersion: apps/v1
kind: Deployment
metadata:
name: centos8
namespace: test
spec:
progressDeadlineSeconds: 600
replicas: 1
revisionHistoryLimit: 10
selector:
matchLabels:
deployment: centos8
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
annotations:
openshift.io/generated-by: OpenShiftNewApp
sidecar.istio.io/inject: "true"
creationTimestamp: null
labels:
deployment: centos8
spec:
containers:
- image: centos@sha256:a1801b843b1bfaf77c501e7a6d3f709401a1e0c83863037fa3aab063a7fdb9dc
imagePullPolicy: IfNotPresent
name: centos8
args:
- sleep
- inf
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
dnsPolicy: ClusterFirst
restartPolicy: Always
schedulerName: default-scheduler
securityContext: {}
terminationGracePeriodSeconds: 30
Actual results:
oc get po
NAME READY STATUS RESTARTS AGE
centos8-d74994b68-fzpfz 1/1 Running 0 29s
oc describe po | grep -i container | grep -i created
Normal Created 29s kubelet Created container centos8
oc delete po centos8-d74994b68-fzpfz
pod "centos8-d74994b68-fzpfz" deleted
oc get po
NAME READY STATUS RESTARTS AGE
centos8-d74994b68-8sczg 2/2 Running 0 78s
oc describe po | grep -i container | grep -i created
Normal Created 71s kubelet Created container centos8
Normal Created 68s kubelet Created container istio-proxy
Expected: envoy sidecar is injected reliably into Pod(s) when the Pod(s) are created