Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gRPC cannot be upgraded from 1.66.2 #934

Open
2 tasks
timraymond opened this issue Nov 4, 2024 · 0 comments
Open
2 tasks

gRPC cannot be upgraded from 1.66.2 #934

timraymond opened this issue Nov 4, 2024 · 0 comments

Comments

@timraymond
Copy link
Member

timraymond commented Nov 4, 2024

gRPC currently cannot be upgraded from 1.66.2 to newer versions, for unknown reasons. In #921, it was discovered that this causes Hubble Relay to become unable to connect to the agent pods. TLS connections are able to be established to agents correctly using certificates generated by certgen, but gRPC itself does not function.

We should investigate why this is and what changes need to happen in order to make gRPC upgradeable again.

This upgrade was reverted in #932. As part of the remediation there, gRPC was ignored in Dependabot's configuration (found in .github/dependabot.yaml). This should also be removed once this has been remediated so as to cause Dependabot to automatically upgrade gRPC again.

Acceptance Criteria

  • gRPC can be upgraded from 1.66.2 to 1.67.0 (or beyond) without breaking Relay <-> Agent connectivity in TLS
  • gRPC scanning has been re-enabled in Dependabot
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: No status
Development

No branches or pull requests

1 participant