istio: After upgrade to 1.18.0 Request to probe app failed

Is this the right place to submit this?

  • This is not a security vulnerability or a crashing bug
  • This is not a question about how to use Istio

Bug Description

Pods do not become ready after upgrading istio to 1.18.0

2023-06-15T12:15:15.006134Z error Request to probe app failed: Get “http://10.255.37.140:9090/health”: dial tcp 127.0.0.6:0->10.255.37.140:9090: connect: connection refused, original URL path = /app-health/marketplace/readyzapp URL path = /health

Version

istioctl version
client version: 1.17.2
control plane version: 1.18.0
data plane version: 1.17.2 (32 proxies), 1.18.0 (5 proxies)

kubectl version --short
Client Version: v1.27.2
Kustomize Version: v5.0.1
Server Version: v1.26.3

Additional Information

only the workloads running 1.18.0 proxies are failing

helm chart values for istiod:

global:
  proxy:
    holdApplicationUntilProxyStarts: true
    resources:
      requests:
        cpu: 1m
        memory: 128Mi
      limits:
        cpu: 2000m
        memory: 1Gi
# meshConfig:
#   outboundTrafficPolicy:
#     mode: REGISTRY_ONLY
pilot:
  autoscaleEnabled: false
  replicaCount: 2

downgrading istio to 1.17.3 resovles the issue

Affected product area

  • Ambient
  • Docs
  • Installation
  • Networking
  • Performance and Scalability
  • Extensions and Telemetry
  • Security
  • Test and Release
  • User Experience
  • Developer Infrastructure
  • Upgrade
  • Multi Cluster
  • Virtual Machine
  • Control Plane Revisions

About this issue

  • Original URL
  • State: closed
  • Created a year ago
  • Comments: 15 (11 by maintainers)

Most upvoted comments

Not sure why “connection refused” though

On Tue, Jun 27, 2023 at 7:02 AM John Howard @.***> wrote:

The issue is the app DOES care about the Host

On Mon, Jun 26, 2023 at 8:47 PM Zhonghu Xu @.***> wrote:

I think before the app got 9090 as the Host header port, and now it gets 15020. I could be mistaken though

If the app does not care about the host, then consued why there is connection refused error met

2023-06-15T12:15:15.006134Z error Request to probe app failed: Get " http://10.255.37.140:9090/health": dial tcp 127.0.0.6:0-> 10.255.37.140:9090: connect: connection refused, original URL path = /app-health/marketplace/readyzapp URL path = /health

— Reply to this email directly, view it on GitHub https://github.com/istio/istio/issues/45482#issuecomment-1608743035, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAEYGXJFCEKUCRKW564KJHDXNJJUJANCNFSM6AAAAAAZH22JD4 . You are receiving this because you commented.Message ID: @.***>