Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't log TLS handshake error on health-probe-connections #194

Open
ibihim opened this issue Aug 24, 2022 · 1 comment
Open

Don't log TLS handshake error on health-probe-connections #194

ibihim opened this issue Aug 24, 2022 · 1 comment

Comments

@ibihim
Copy link
Collaborator

ibihim commented Aug 24, 2022

What

Add flag that silences logs for shallow tcp connections that are opened and closed.

Why

haproxy makes health probes by opening tcp connections and closing them.
kube-rbac-proxy reports a TLS handshake error, when this happens.

Ref

https://bugzilla.redhat.com/show_bug.cgi?id=2111670

@ibihim
Copy link
Collaborator Author

ibihim commented Sep 14, 2023

I've looked into the topic, and there aren't any clear solutions available.

While there's a filter for logging, it only applies to the message content. It doesn't seem possible to entirely drop the message.

Given that this is a deep-seated networking error within the Go programming language, adjusting the log verbosity doesn't seem to have any effect.

It's worth noting that the actor initiating the TCP RST is the root of the issue, not the receiver that logs this behavior.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant