TLS handshake failure in csi-addons-controller-manager

[ELENAGER]

The following error appears in csi-addons-controller-manager log:

2025-01-20T11:55:44.579Z ERROR Failed to establish connection with sidecar {"controller": "csiaddonsnode", "controllerGroup": "csiaddons.openshift.io", "controllerKind": "CSIAddonsNode", "CSIAddonsNode": {"name":"dr1-rook-ceph-deployment-csi-cephfsplugin-provisioner","namespace":"rook-ceph"}, "namespace": "rook-ceph", "name": "dr1-rook-ceph-deployment-csi-cephfsplugin-provisioner", "reconcileID": "a378ef3e-73e9-4f3e-82d3-4fcee906b15f", "NodeID": "dr1", "DriverName": "rook-ceph.cephfs.csi.ceph.com", "EndPoint": "10.244.0.8:9070", "error": "rpc error: code = Unavailable desc = connection error: desc = \"transport: authentication handshake failed: tls: first record does not look like a TLS handshake\""}

[Madhu-1]

@bipuladh ^^

[nixpanic]

@ELENAGER can you share the details and logs from the csi-addons sidecar of the dr1-rook-ceph-deployment-csi-cephfsplugin-provisioner Pod that has IP-address 10.244.0.8?

Ideally both the CSI-Addons controller and CSI-Addons sidecars have the same version. If not, make sure to enable or disable the enable-auth option on both componentes. See #692 for a little more details.

[bipuladh]

Looks like the sidecar image that is currently being used is old as per my conversation with @ELENAGER

[bipuladh]

Please use quay.io/badhikar/k8s-sidecar:stable image for the sidecar.

[nixpanic]

Please use quay.io/badhikar/k8s-sidecar:stable image for the sidecar.

Are there any modifications in there? You can find the container-images built for releases and the main branch also at https://quay.io/repository/csiaddons/k8s-sidecar

[bipuladh]

Looks like there is an issue with the case of the HTTP header field. This has been fixed in #756
Please use quay.io/badhikar/k8s-sidecar:fix
I have the content's of the PR in that image.