keel diff: handshake age and drift message (N6, N10) #140

New issue

Open

opened 2026-10-10 14:37:10 -03:00 by marcos-mendez · 0 comments

marcos-mendez commented 2026-10-10 14:37:10 -03:00 (Migrated from github.com)

Copy link

keel 0.23.13. N6: an 8 h old handshake is reported as same: handshake: same (a handshake (29057 s ago)); a handshake older than a few minutes (WireGuard rekeys every 2 min with traffic, persistent keepalive) is drift. N10: the drift message says "keel mesh sync on that member" even when the member is down; say it is unreachable. Evidence: handbook docs/evidence/2026-10-10-rollout-0.23.13.md.

keel 0.23.13. N6: an 8 h old handshake is reported as same: `handshake: same (a handshake (29057 s ago))`; a handshake older than a few minutes (WireGuard rekeys every 2 min with traffic, persistent keepalive) is drift. N10: the drift message says "keel mesh sync on that member" even when the member is down; say it is unreachable. Evidence: handbook docs/evidence/2026-10-10-rollout-0.23.13.md.

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

main

fix/ci-flakes-177

fix/etcd-stalled-peer-stream-167

fix/155-minor-items

fix/vip-gone-note-in-state-dir-178

feat/images-key-verifiers

fix/pg-start-fenced-156

fix/vip-rides-out-election-167-168

fix/vip-lock-no-path-trigger-164

fix/pg-reseed-clears-vip-fence-166

fix/pg-promote-follow-before-join-169

fix/pg-expired-lease-alone-165

fix/vip-learn-without-etcd

fix/pg-fenced-holder-writable

fix/pg-reseed-cluster-unit

feat/postgres-pair-failover

docs/signing-roles-0055

test/write-resume-bound-5s

feat/postgres-pair-converge

feat/postgres-pair

fix/planned-promote-quiesce

fix/vip-restart-renewal

feat/mesh-keepalive

fix/promote-announce-in-background

fix/overlay-mtu-live

fix/claim-txn-bounded-retry

feat/container-template-guard

test/flaky-vip-upgrade-epoch-133

fix/peer-added-live

test/flaky-mariadb-cert-ask-131

test/divergence-record-clock-second

test/flaky-netns-94

fix/overlay-mtu-119

test/mariadb-cloud-simple-crash

fix/follow-writable-when-the-vip-lands

fix/vip-lease-last-second

fix/mariadb-crashed-primary-keel94

fix/promote-old-primary-gone-bounded

fix/joiner-full-mesh-live-peers

fix/flaky-netns-keel94

fix/overlay-live-peers

fix/root-holder-for-every-member

fix/old-primary-read-only-until-proven

feat/invite-in-the-inviters-region

fix/version-from-metadata

fix/members-channel-thread-switch

feat/mariadb-pair-scenario

feat/mariadb-pair-semisync

feat/etcd-root-issued-rbac

feat/vip-continuity-upgrades

fix/overlay-new-in-chain

feat/mesh-vip

ci/security-scan

fix/etcd-tests-pki-clock

feat/mesh-etcd

fix/mesh-full-mesh

feat/mesh-join

feat/mesh-token

fix/overlay-peer-not-this-node

feat/spec-cloud-section

fix/inspect-wireguard-window-keeps-spec

fix/inspect-wireguard-state

fix/inspect-on-a-keel-core

feat/overlay-state-hooks

feat/manifest-firewall

feat/manifest-apply

feat/manifest-reader

fix/database-waits-for-server

fix/replica-read-only

fix/seed-accounts-roles-server-id

feat/seed-replica

test/ssh-over-console

fix/lxc-console-confirm

fix/grant-compressed-ipv6

feat/wireguard-overlay

fix/hub-measured-honestly

feat/converge-tls-acme-apply

feat/converge-tls-acme

feat/converge-hostname

feat/converge-security-alerts

docs/manifest-unit-fields

pkg/keel-0.2.1

fix/hosts-read-as-the-resolver-reads

docs/diff-converged-field

fix/hosts-keeps-one-entry-for-the-host

feat/firstboot-system-hook

feat/apply-system-only

feat/apply-fqdn-hosts

fix/security-updates-name

fix/diff-disabled-feature

fix/inspect-ipv6-slaac

feat/apply-users-locale

fix/verify-cache-names

feat/render-ip6

fix/diff-secret-files

feat/diff

feat/inspect

docs/license

feat/pull-assemble

No results found.

Labels

Clear labels   

accessibility

Barrier affecting people with disabilities

  

bug

Something isn't working

  

documentation

Improvements or additions to documentation

  

duplicate

This issue or pull request already exists

  

enhancement

New feature or request

  

good first issue

Good for newcomers

  

help wanted

Extra attention is needed

  

invalid

This doesn't seem right

  

question

Further information is requested

  

wontfix

This will not be worked on

No labels

accessibility

bug

documentation

duplicate

enhancement

good first issue

help wanted

invalid

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

Keel-Linux/keel#140

No description provided.