open-nomad/client/allocrunner
James Rasell a9a04141a3
consul/connect: avoid warn messages on connect proxy errors
When creating a TCP proxy bridge for Connect tasks, we are at the
mercy of either end for managing the connection state. For long
lived gRPC connections the proxy could reasonably expect to stay
open until the context was cancelled. For the HTTP connections used
by connect native tasks, we experience connection disconnects.
The proxy gets recreated as needed on follow up requests, however
we also emit a WARN log when the connection is broken. This PR
lowers the WARN to a TRACE, because these disconnects are to be
expected.

Ideally we would be able to proxy at the HTTP layer, however Consul
or the connect native task could be configured to expect mTLS, preventing
Nomad from MiTM the requests.

We also can't mange the proxy lifecycle more intelligently, because
we have no control over the HTTP client or server and how they wish
to manage connection state.

What we have now works, it's just noisy.

Fixes #10933
2021-08-05 11:27:35 +02:00
..
interfaces implement alloc runner task restart hook 2021-01-22 10:55:40 -05:00
state
taskrunner Merge pull request #10849 from benbuzbee/benbuz/fix-destroy 2021-07-19 10:49:31 -07:00
alloc_runner.go testing fixes 2021-04-14 10:17:28 -04:00
alloc_runner_hooks.go client/ar: thread through cpuset manager 2021-04-13 13:28:36 -04:00
alloc_runner_test.go
alloc_runner_unix_test.go consul: avoid triggering unnecessary sync when removing workload 2021-07-06 14:08:42 -05:00
allocdir_hook.go
cgroup_hook.go client/ar: thread through cpuset manager 2021-04-13 13:28:36 -04:00
config.go client/ar: thread through cpuset manager 2021-04-13 13:28:36 -04:00
consul_grpc_sock_hook.go consul/connect: avoid warn messages on connect proxy errors 2021-08-05 11:27:35 +02:00
consul_grpc_sock_hook_test.go
consul_http_sock_hook.go
consul_http_sock_hook_test.go
csi_hook.go CSI: use AccessMode/AttachmentMode from CSIVolumeClaim 2021-04-07 11:24:09 -04:00
groupservice_hook.go client: fix logline in group shutdown hook 2021-07-08 11:14:37 -05:00
groupservice_hook_test.go consul: avoid triggering unnecessary sync when removing workload 2021-07-06 14:08:42 -05:00
health_hook.go Add gosimple linter (#9590) 2020-12-09 11:05:18 -08:00
health_hook_test.go
migrate_hook.go
network_hook.go docker: generate /etc/hosts file for bridge network mode (#10766) 2021-06-16 14:55:22 -04:00
network_hook_test.go
network_manager_linux.go ar: isolate network actions performed by client 2021-02-02 23:24:57 -05:00
network_manager_linux_test.go
network_manager_nonlinux.go
networking.go ar: isolate network actions performed by client 2021-02-02 23:24:57 -05:00
networking_bridge_linux.go networking: Ensure CNI iptables rules are appended to chain and not forced to be first 2021-04-15 10:11:15 -04:00
networking_cni.go ar: refactor go-cni results processing & add test 2021-04-08 09:20:14 -07:00
networking_cni_test.go tests: allocrunner CNI tests are Linux-only (#10783) 2021-06-18 11:34:31 -04:00
task_hook_coordinator.go
task_hook_coordinator_test.go
testing.go testing fixes 2021-04-14 10:17:28 -04:00
upstream_allocs_hook.go
util.go