Virtual services of Contour in AVI is down

Products

• VMware vSphere Kubernetes Service

Issue/Introduction

• Create Contour ingress with Supervisor service. See Install Contour as a Supervisor Service
• Pods of Contour and Envoy are running
• Virtual Service of Contour in AVI is down with the Health messages of Envoy Pools:
  
  Marked down by System-TCP [Connection refused]

Environment

vSphere with Tanzu

Resolution

This is a known issue of Contour which doesn't spin up and listeners until some ingress configuration exists in the cluster. Until that happens, any health check requests to Envoy would fail.

After create Ingress with Contour, for example, install Harbor with Supervisor service which will use the Contour Ingress, the Virtual Services in AVI will become Up.

More information about How to install Harbor with Supervisor service, see Install Harbor as a Supervisor Service

Additional Information

NSX ALB with Contour/Envoy Ingress fails Health Monitor System-TCP