EDS status SYNCED (50%)

1

When running istioctl proxy-status on our clusters, the EDS status for our workload sidecars is always SYNCED (50%). What does this mean? Is this a problem?

NAME                                                   CDS        LDS        EDS               RDS          PILOT                            VERSION
istio-ingressgateway-6974b56f84-98p7t.istio-system     SYNCED     SYNCED     SYNCED (100%)     NOT SENT     istio-pilot-5c4cb4fd96-lpf2c     1.1.0
istio-ingressgateway-6974b56f84-brnfk.istio-system     SYNCED     SYNCED     SYNCED (100%)     NOT SENT     istio-pilot-5c4cb4fd96-hzstv     1.1.0
istio-ingressgateway-6974b56f84-f4t4f.istio-system     SYNCED     SYNCED     SYNCED (100%)     NOT SENT     istio-pilot-5c4cb4fd96-lpf2c     1.1.0
istio-ingressgateway-6974b56f84-r5ddc.istio-system     SYNCED     SYNCED     SYNCED (100%)     NOT SENT     istio-pilot-5c4cb4fd96-lpf2c     1.1.0
istio-ingressgateway-6974b56f84-wx7jc.istio-system     SYNCED     SYNCED     SYNCED (100%)     NOT SENT     istio-pilot-5c4cb4fd96-lpf2c     1.1.0
web-84b8fdfdfd-87glw.irs-server-staging                SYNCED     SYNCED     SYNCED (50%)      SYNCED       istio-pilot-5c4cb4fd96-hzstv     1.1.0
web-84b8fdfdfd-bq7sf.irs-server-staging                SYNCED     SYNCED     SYNCED (50%)      SYNCED       istio-pilot-5c4cb4fd96-lpf2c     1.1.0
web-84b8fdfdfd-cz5f4.irs-server-staging                SYNCED     SYNCED     SYNCED (50%)      SYNCED       istio-pilot-5c4cb4fd96-lpf2c     1.1.0
web-b6ff85b4-4fj8b.irs-client-staging                  SYNCED     SYNCED     SYNCED (50%)      SYNCED       istio-pilot-5c4cb4fd96-lpf2c     1.1.0
web-b6ff85b4-t9rts.irs-client-staging                  SYNCED     SYNCED     SYNCED (50%)      SYNCED       istio-pilot-5c4cb4fd96-hzstv     1.1.0
web-b6ff85b4-tp7mf.irs-client-staging                  SYNCED     SYNCED     SYNCED (50%)      SYNCED       istio-pilot-5c4cb4fd96-hzstv     1.1.0

And running proxy-status for one of the sidecars:

Clusters Match
Listeners Match
Routes Match (RDS last loaded at Wed, 06 Mar 2019 16:45:17 EST)

(run at 16:50:00 EST)

Running 1.1.0-rc.2 control plane and sidecars.

1 Like
2

Any response to this issue. I am seeing the same thing in 1.1 official.

istioctl proxy-status
NAME                                                   CDS        LDS        EDS               RDS          PILOT                           VERSION
awscli2-7f759d4446-59cmd.matt                          SYNCED     SYNCED     SYNCED (50%)      SYNCED       istio-pilot-f4c98cfbf-9hz8q     1.1.0
istio-ingressgateway-668676fbdb-252tp.istio-system     SYNCED     SYNCED     SYNCED (100%)     NOT SENT     istio-pilot-f4c98cfbf-9hz8q     1.1.0
3

I am also facing the same issue and killing pilot also doesnt help.

istioctl proxy-status:
10%20PM

I can also see there is a mismatch in “cluster” config from pilot to envoy:

54%20PM

1 Like
4

^^ Seems to be identical to me.

5

I have opened a documentation issue to provide better guidance for this problem in the future.

The percentage represents the number Endpoint Discovery Service entries that Envoy has as compared to the number Pilot has. I am not clear if “50%” is a problem in your case.

6

I recently upgraded to 1.1.1 and still see the same issue.

In addition, 1.1.1 still reports as version 1.1.0

› istioctl proxy-status
NAME                                                   CDS        LDS        EDS               RDS          PILOT                            VERSION
istio-ingressgateway-794cfcf8bc-h7vmh.istio-system     SYNCED     SYNCED     SYNCED (100%)     NOT SENT     istio-pilot-84f6d4bc5d-vcpb8     1.1.0
marketmaps-b7469cdbd-x64st.test                        SYNCED     SYNCED     SYNCED (50%)      SYNCED       istio-pilot-84f6d4bc5d-vcpb8     1.1.0
7

See: Proxy status reports proxy version incorrectly · Issue #9597 · istio/istio · GitHub

8

Why is this not a problem? I’d like to understand better as well. It definitely makes the user think something isn’t sync’ing correctly… and this description of things being out of sync doesn’t sound like an okay thing, either.

9

There is now a documentation work item, nearly two weeks old, and no one claims to know what “50%” means.

The output is unclear, and I am trying to get to the bottom of it.

1 Like
10

I put in some explanation, I welcome input in the github item :). For now, 50% SYNCED is good as your sidecar isn’t having configs from pods in istio-system ns.