Skip to content

Improve config validation health checking #8118

Merged
rshriram merged 2 commits intoistio:masterfrom
ayj:merge-1-0-galley-endpoint-fixes-into-master
Aug 22, 2018
Merged

Improve config validation health checking #8118
rshriram merged 2 commits intoistio:masterfrom
ayj:merge-1-0-galley-endpoint-fixes-into-master

Conversation

@ayj
Copy link
Copy Markdown
Contributor

@ayj ayj commented Aug 21, 2018

Galley readiness and liveness improves #7605 and #7986 have already been merged into 1.0 branch. This PR merges those same changes into the master branch.

ayj added 2 commits August 21, 2018 14:21
Readiness and liveliness probes were failing on some providers because
GET requests were blocking for multiple seconds. Mitigate the issue
by decreasing the frequency of GET (to avoid possible throttling) and
increase the acceptable health check interval from 4s to 10s.

Shorm term fix for istio#7586. Longer
term fix requires switching to proper controller-style
reconciliation. That work should be aligned with the sidecar injector.
…istio#7986)

The validation webhook's health file updates and configuration
reconciliation were invoked from the same goroutine. Delays in
checking and updating the k8s configuration could result in the health
file not being updated in time to pass the health checks. Use
istio.io/istio/pkg/probe to decouple the two code paths.
@istio-testing
Copy link
Copy Markdown
Collaborator

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To fully approve this pull request, please assign additional approvers.
We suggest the following additional approver: ayj

If they are not already assigned, you can assign the PR to them by writing /assign @ayj in a comment when ready.

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Copy link
Copy Markdown
Member

@cmluciano cmluciano left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

few nits


if wh.healthCheckInterval != 0 && wh.healthCheckFile != "" {
wh.healthProbe.RegisterProbe(wh.healthController, "validation")
wh.healthProbe.SetAvailable(errors.New("not ready"))
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we add more context or info to this error message?

- --tlsCertFile=/etc/istio/certs/cert-chain.pem
- --tlsKeyFile=/etc/istio/certs/key.pem
- --healthCheckInterval=2s
- --healthCheckInterval=1s
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we have any open issues affecting this interval?

@rshriram rshriram merged commit 6acd9fd into istio:master Aug 22, 2018
@ayj ayj deleted the merge-1-0-galley-endpoint-fixes-into-master branch October 17, 2018 16:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants