bmears-aaxis

"When you say failing to initialize, do you mean the initial call to collect instance metadata fails, or are you talking about the first connection attempt failing?" I'm not sure...

Just a note, since these are both google authorized features, I assume this will come up again with other clients. Maybe a discussion with the ASM team to come up...

Sounds good. Thanks again.

Here's additional details: *url.Error Get "http://169.254.169.254/computeMetadata/v1/instance/service-accounts/default/scopes": dial tcp 169.254.169.254:80: connect: connection refused | Get "http://169.254.169.254/computeMetadata/v1/instance/service-accounts/default/scopes": dial tcp 169.254.169.254:80: connect: connection refused Trying to get SA details for the account used...

Exactly. We were able to get around the issue with IP filtering on the istio proxy, disabling the metadata service call and the subsequent call to the cloud SQL API....

 It's really mostly an annoyance cause the proxy recovers fairly quickly. You can see the restarts here.

I guess the question now is, what version do we have? :) That looks promising though.

Most definently. I appreciate your assistance.