Open
Description
Is this the right place to submit this?
- This is not a security vulnerability or a crashing bug
- This is not a question about how to use Istio
Bug Description
We upgraded our nodepool from AL2 to AL2023. All migrated ztunnel pods stopped connecting until starved
Failed TCP handshake Too many open files
Rollback to AL2 fixes the issue
I noticed these warnings at startup time:
2025-03-19T23:55:40.113717Z warn cni-agent iptables/iptables.go:492 reconcile is needed but no-reconcile flag is set. Unexpected behavior may occur due to preexisting iptables rules component=host
Version
istio-release/install-cni:1.25.0-distroless
istio-release/pilot:1.25.0-distroless
istio-release/proxyv2:1.25.0-distroless
istio-release/ztunnel:1.25.0-distroless
Client Version: v1.30.2
Kustomize Version: v5.0.4-0.20230601165947-6ce0bf390ce3
Server Version: v1.31.6-eks-bc803b4
Additional Information
kube-proxy:v1.31.3-eks-1-31-10