Satwick Dash
unread,Oct 8, 2025, 5:52:58 AM (4 days ago) Oct 8Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to envoy-users
Hi,
We're using envoy as a container for outbound requests from a pod. We're also using transport_socket.tls.v3.Secret for the certificates stored in a K8s secret.
Is there a way we can check the health of running envoy instance, to see if we're facing TLS errors, due to empty certificates? Specifically errors like -
```
[2025-10-08 07:56:32.875][22][debug][pool] [source/common/conn_pool/conn_pool_base.cc:495] [Tags: "ConnectionId":"1"] client disconnected, failure reason: TLS error: Secret is not supplied by SDS
[2025-10-08 07:56:32.875][22][debug][router] [source/common/router/router.cc:1355] [Tags: "ConnectionId":"0","StreamId":"15292288025689618954"] upstream reset: reset reason: remote connection failure, transport failure reason: TLS error: Secret is not supplied by SDS
```
Is there a way we can check for these errors via a livenessProbe / readinessProbe?
Thanks in advance!