-
Notifications
You must be signed in to change notification settings - Fork 7.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
test flake: private key does not match public key #49648
Comments
similar with #49650? |
i think it's different, that one didn't have istiod crashlooping. but maybe same |
So the istiod is restarting many times. Its not failign with this on the initial install. So probably its crashing. And then fails to come up -- two separate bugs. |
I think I get it. We have 2 files, but we do not read them atomically. I can reproduce by flipping between two cacerts. https://ahmet.im/blog/kubernetes-inotify/ touches on this but doesn't suggest a fix. I don't understand why we seem to be permanently in that state though. I would expect TestIntermediateCertificateRefresh triggers it and only happens if istiod happens to crash around that time. Maybe there is something more nefarious going on. |
Oh I think its simpler, the test is just broken:
vs
|
And its not documented how it is generated... yay. I don't know how the test works at all. Oh, actually looks like it doesn't actually assert anything 😬 |
https://prow.istio.io/view/gs/istio-prow/logs/integ-ambient_istio_postsubmit/1763283647529488384 weird
The text was updated successfully, but these errors were encountered: