Skip to content

Commit

Permalink
Smoke test design has been reworked in dddc0ec
Browse files Browse the repository at this point in the history
  • Loading branch information
bgandon committed May 10, 2024
1 parent c4874e9 commit 1ac95d5
Showing 1 changed file with 0 additions and 2 deletions.
2 changes: 0 additions & 2 deletions ci/release_notes.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,4 @@

### Caveats

- Smoke tests require an access to the Internet.

- Clustering mode is experimental: we've experienced situations where no Traefik node is able to acquire the Consul lock in order to access Let's Encrypt cetificates. In such situations, all HTTPS requests requiring a Let's Encrypt certificate are failing, which is pretty bad. We've observed that the Traefik timeout for acquiring Consul lock is too short. Consul does store the expected lock value written by Traefik, but a little too late. So when the value is available, Traefik already has failed at acquiring the lock, and has already started retrying, writing a new value. Traefik won't be able to read the new value back because Consul is still late. Lock acquiring will fail again. Traefik will be able to read this new value only during the next retry. All in all, with enough Let's Encrypt certificates stored (we haven't identified any precise threshold yet), we've observed an infinite loop while Traefik fails at acquiring the Consul lock.

0 comments on commit 1ac95d5

Please sign in to comment.