UNCLASSIFIED - NO CUI

Mismatch between Analyzer Service Selector and Pod Labels

Summary

Seeing DestinationService: anchore-anchore-enterprise-analyzer.anchore.svc.cluster.local Response Code: 503 UH error in istio-proxy logs.

Steps to reproduce

Deploy Anchore with 2.4.2-bb.16 version.

What is the current behavior?

The analyzer service gets created with app.kubernetes.io/name=anchore-anchore-enterprise-analyzer selector.

What is the expected behavior?

The analyzer service should get created with app.kubernetes.io/name=anchore-anchore-enterprise selector which matches with the analyzer pod's app.kubernetes.io/name=anchore-anchore-enterprise label.

Relevant logs and/or screenshots

Pod labels:

pod-labels

Service selectors:

svc-selectors

Possible fixes

The selector for the analyzer service should be app.kubernetes.io/name: {{ template "enterprise.fullname" . }} instead of app.kubernetes.io/name: {{ template "enterprise.analyzer.fullname" . }} in the analyzer template.

Or the app.kubernetes.io/name=anchore-anchore-enterprise label for the pod should be updated to app.kubernetes.io/name=anchore-anchore-enterprise-analyzer to match with the existing service selector.

/cc @bkhamitov @snaq11092 @bimbola81 @fkqs @jasdeep.s.basra @dax.mcdonald @justin.carry @mucles