Skip to content

[v18] Disable http_proxy for IMDS/metadata services#64552

Open
marcoandredinis wants to merge 2 commits intobranch/v18from
bot/backport-64158-branch/v18
Open

[v18] Disable http_proxy for IMDS/metadata services#64552
marcoandredinis wants to merge 2 commits intobranch/v18from
bot/backport-64158-branch/v18

Conversation

@marcoandredinis
Copy link
Contributor

@marcoandredinis marcoandredinis commented Mar 12, 2026

Backport #64158 to branch/v18

changelog: Fixed Azure and GCP server auto-discovery installation when the target VM had a system-wide HTTP proxy configured.

Manual Test Plan

Test Environment

local cluster

Test Cases

  • Server discovery in GCP, in a VM that requires HTTP_PROXY to reach internet

@marcoandredinis marcoandredinis force-pushed the bot/backport-64158-branch/v18 branch from d346c6e to fe7f34d Compare March 12, 2026 17:13
@marcoandredinis marcoandredinis marked this pull request as ready for review March 12, 2026 17:21
@github-actions github-actions bot requested a review from gzdunek March 12, 2026 17:22
@github-actions github-actions bot requested a review from r0mant March 12, 2026 17:22
Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fe7f34df65

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment on lines +592 to +594
loggerWithVMMetadata.ErrorContext(ctx, "Installing teleport in GCP VM failed",
"ip", ip,
"error", err,

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Avoid emitting failure logs before all VM IPs are tried

This ErrorContext call now runs on every failed SSH attempt, even when a later IP succeeds and the function returns nil. On multi-homed instances (for example, first IP unreachable, second reachable), this produces misleading "Installing teleport in GCP VM failed" error logs for successful installs, which can trigger false alarms and obscure real failures. The error-level log should be restricted to terminal failure paths.

Useful? React with 👍 / 👎.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I can move this to a warning. But I'll create another PR for it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant