payload: {"action":"created","issue":{"url":"https://api.github.com/repos/knative/serving/issues/5129","repository_url":"https://api.github.com/repos/knative/serving","labels_url":"https://api.github.com/repos/knative/serving/issues/5129/labels{/name}","comments_url":"https://api.github.com/repos/knative/serving/issues/5129/comments","events_url":"https://api.github.com/repos/knative/serving/issues/5129/events","html_url":"https://github.com/knative/serving/issues/5129","id":479613345,"node_id":"MDU6SXNzdWU0Nzk2MTMzNDU=","number":5129,"title":"Disabling httpProtocol failed to make routes ready due to a failure of Igress status prober","user":{"login":"nak3","id":2138339,"node_id":"MDQ6VXNlcjIxMzgzMzk=","avatar_url":"https://avatars2.githubusercontent.com/u/2138339?v=4","gravatar_id":"","url":"https://api.github.com/users/nak3","html_url":"https://github.com/nak3","followers_url":"https://api.github.com/users/nak3/followers","following_url":"https://api.github.com/users/nak3/following{/other_user}","gists_url":"https://api.github.com/users/nak3/gists{/gist_id}","starred_url":"https://api.github.com/users/nak3/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nak3/subscriptions","organizations_url":"https://api.github.com/users/nak3/orgs","repos_url":"https://api.github.com/users/nak3/repos","events_url":"https://api.github.com/users/nak3/events{/privacy}","received_events_url":"https://api.github.com/users/nak3/received_events","type":"User","site_admin":false},"labels":[{"id":868660931,"node_id":"MDU6TGFiZWw4Njg2NjA5MzE=","url":"https://api.github.com/repos/knative/serving/labels/area/networking","name":"area/networking","color":"e59cc2","default":false},{"id":815594744,"node_id":"MDU6TGFiZWw4MTU1OTQ3NDQ=","url":"https://api.github.com/repos/knative/serving/labels/kind/bug","name":"kind/bug","color":"d73a4a","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-08-12T12:15:57Z","updated_at":"2019-08-13T00:59:45Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"\r\n## In what area(s)?\r\n\r\n/area networking\r\n\r\n## What version of Knative?\r\n\r\nv0.8.0-40-g59f56a3d\r\n\r\n#### Steps to reproduce\r\n\r\n#### 1. Set httpProtocol to `Disabled` and Enable `autoTLS`. \r\n\r\n```\r\n$ kubectl  edit cm -n knative-serving   config-network\r\n  autoTLS: Enabled\r\n  httpProtocol: Disabled\r\n```\r\n\r\n(Perhaps enabling `reconcileExternalGateway` could produce this issue as well.)\r\n\r\n#### 2. Deploy knative service\r\n\r\n```\r\n$ kn service create hello-example --image=gcr.io/knative-samples/helloworld-go\r\n```\r\n\r\n## Actual result\r\n\r\nRoute and Ingress does not become Ready, due to `Waiting for VirtualService to be ready`.\r\n\r\n```\r\n$ kubectl get rt\r\nNAME                                      URL                                                         READY     REASON\r\nroute.serving.knative.dev/hello-example   https://hello-example.default.xxx.example.com   Unknown   Uninitialized\r\n\r\n$ kubectl get rt -o yaml\r\n    ....\r\n    - lastTransitionTime: \"2019-08-12T11:56:19Z\"\r\n      message: Waiting for VirtualService to be ready\r\n      reason: Uninitialized\r\n      status: Unknown\r\n      type: IngressReady\r\n    - lastTransitionTime: \"2019-08-12T11:56:19Z\"\r\n      message: Waiting for VirtualService to be ready\r\n      reason: Uninitialized\r\n      status: Unknown\r\n      type: Ready\r\n\r\n$ kubectl get ingresses.networking.internal.knative.dev \r\nNAME            READY     REASON\r\nhello-example   Unknown   Uninitialized\r\n```\r\n\r\nHere is the gateway settings configured by reconciler.\r\n\r\n```\r\n$ kubectl get gateway -n knative-serving knative-ingress-gateway -o yaml\r\n  ...\r\nspec:\r\n  selector:\r\n    istio: ingressgateway\r\n  servers:\r\n  - hosts:\r\n    - hello-example.default.xxx.example.com\r\n    port:\r\n      name: hello-example:0\r\n      number: 443\r\n      protocol: HTTPS\r\n    tls:\r\n      caCertificates: \"\"\r\n      credentialName: hello-example-322852c2-bcf8-11e9-bc67-02a7cb0e8f00\r\n      httpsRedirect: false\r\n      mode: SIMPLE\r\n      privateKey: tls.key\r\n      serverCertificate: tls.crt\r\n      subjectAltNames: null\r\n```\r\n\r\nnetworking-istio pod produces following error:\r\n\r\n```\r\n$ kubectl  -n knative-serving  logs networking-istio-bfd54dd57-kgp7q\r\n ...\r\n{\"level\":\"error\",\"ts\":\"2019-08-12T11:59:02.977Z\",\"logger\":\"istiocontroller.ingress-controller.status-manager\",\"caller\":\"ingress/status.go:276\",\"msg\":\"Probing of 172.20.42.151 failed: ready: false, error: error roundtripping http://172.20.42.151/: dial tcp 172.20.42.151:80: connect: connection refused\",\"knative.dev/controller\":\"ingress-controller\",\"stacktrace\":\"knative.dev/serving/pkg/reconciler/ingress.(*StatusProber).processWorkItem\\n\\t/home/knakayam/.go/src/knative.dev/serving/pkg/reconciler/ingress/status.go:276\\nknative.dev/serving/pkg/reconciler/ingress.(*StatusProber).Start.func1\\n\\t/home/knakayam/.go/src/knative.dev/serving/pkg/reconciler/ingress/status.go:200\"}\r\n```\r\nThe `172.20.42.151` is istio-ingressgateway's IP.\r\n\r\n```\r\n$ kubectl get ep -n istio-system  istio-ingressgateway\r\nNAME                   ENDPOINTS                                                              AGE\r\nistio-ingressgateway   172.20.42.151:15031,172.20.42.151:15029,172.20.42.151:80 + 6 more...   7d7h\r\n```\r\n\r\nIt looks like Ingress status prober tries to `80` port and failed to probe.\r\n\r\nhttps://github.com/knative/serving/blob/59f56a3d1510e84f83e4280191ee4df2db3ba6cd/pkg/reconciler/ingress/status.go#L262\r\n\r\n## Additional info\r\n\r\nI have verified `httpProtocol: Enabled` works fine."},"comment":{"url":"https://api.github.com/repos/knative/serving/issues/comments/520648621","html_url":"https://github.com/knative/serving/issues/5129#issuecomment-520648621","issue_url":"https://api.github.com/repos/knative/serving/issues/5129","id":520648621,"node_id":"MDEyOklzc3VlQ29tbWVudDUyMDY0ODYyMQ==","user":{"login":"JRBANCEL","id":1249763,"node_id":"MDQ6VXNlcjEyNDk3NjM=","avatar_url":"https://avatars2.githubusercontent.com/u/1249763?v=4","gravatar_id":"","url":"https://api.github.com/users/JRBANCEL","html_url":"https://github.com/JRBANCEL","followers_url":"https://api.github.com/users/JRBANCEL/followers","following_url":"https://api.github.com/users/JRBANCEL/following{/other_user}","gists_url":"https://api.github.com/users/JRBANCEL/gists{/gist_id}","starred_url":"https://api.github.com/users/JRBANCEL/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JRBANCEL/subscriptions","organizations_url":"https://api.github.com/users/JRBANCEL/orgs","repos_url":"https://api.github.com/users/JRBANCEL/repos","events_url":"https://api.github.com/users/JRBANCEL/events{/privacy}","received_events_url":"https://api.github.com/users/JRBANCEL/received_events","type":"User","site_admin":false},"created_at":"2019-08-13T00:59:45Z","updated_at":"2019-08-13T00:59:45Z","author_association":"CONTRIBUTOR","body":"/assign"}}
other: {"actor":{"display_login":"JRBANCEL"}}