<p>I want to manually reroute (when I have needs) a web server (A Helm deployment on GKE) to another one.</p>
<p>To do that I have 3 Helm deployments :</p>
<ul>
<li>Application X</li>
<li>Application Y</li>
<li>Ingress on application X</li>
</ul>
<p>All work fine, but if I launch a Helm update with Ingress chart changing uniquely the selector of the service I target I have 502 errors :(</p>
<p>Source of service :</p>
<pre><code>apiVersion: v1
kind: Service
metadata:
  name: {{ .Values.Service.Name }}-https
  labels:
    app: {{ .Values.Service.Name }}
    type: svc
    name: {{ .Values.Service.Name }}
    environment: {{ .Values.Environment.Name }}
  annotations:
    cloud.google.com/neg: '{&quot;ingress&quot;: true}'
    beta.cloud.google.com/backend-config: '{&quot;ports&quot;: {&quot;{{ .Values.Application.Port }}&quot;:&quot;{{ .Values.Service.Name }}-https&quot;}}'
spec:
  type: NodePort
  selector:
    name: {{ .Values.Application.Name }}
    environment: {{ .Values.Environment.Name }}
  ports:
    - protocol: TCP
      port: {{ .Values.Application.Port }}
      targetPort: {{ .Values.Application.Port }}
---
apiVersion: cloud.google.com/v1beta1
kind: BackendConfig
metadata:
  name: {{ .Values.Service.Name }}-https
spec:
  timeoutSec: 50
  connectionDraining:
    drainingTimeoutSec: 60
  sessionAffinity:
    affinityType: &quot;GENERATED_COOKIE&quot;
    affinityCookieTtlSec: 300
---
apiVersion: networking.k8s.io/v1beta1
kind: Ingress
metadata:
  name: {{ .Values.Service.Name }}-https
  labels:
    app: {{ .Values.Service.Name }}
    type: ingress
    name: {{ .Values.Service.Name }}
    environment: {{ .Values.Environment.Name }}
  annotations:
    kubernetes.io/ingress.global-static-ip-name: {{ .Values.Service.PublicIpName }}
    networking.gke.io/managed-certificates: &quot;{{ join &quot;,&quot; .Values.Service.DomainNames }}&quot;
    nginx.ingress.kubernetes.io/rewrite-target: /
spec:
  backend:
    serviceName: {{ $.Values.Service.Name }}-https
    servicePort: 80
  rules:
  {{- range .Values.Service.DomainNames }}
    - host: {{ . | title | lower }}
      http:
        paths:
          - backend:
              serviceName: {{ $.Values.Service.Name }}-https
              servicePort: 80
  {{- end }}
</code></pre>
<p>The only thing which change from one call to another is the value of &quot;{{ .Values.Application.Name }}&quot;, all other values are strictly the same.</p>
<p>Targeted PODS are always UP &amp; RUNNING and all respond 200 using &quot;kubectl&quot; port forwarding test.</p>
<p>Here is the status of all my namespace objects :</p>
<pre><code>NAME                                           READY   STATUS    RESTARTS   AGE
pod/drupal-dummy-404-v1-pod-744454b7ff-m4hjk   1/1     Running   0          2m32s
pod/drupal-dummy-404-v1-pod-744454b7ff-z5l29   1/1     Running   0          2m32s
pod/drupal-dummy-v1-pod-77f5bf55c6-9dq8n       1/1     Running   0          3m58s
pod/drupal-dummy-v1-pod-77f5bf55c6-njfl9       1/1     Running   0          3m57s

NAME                                    TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)                      AGE
service/drupal-dummy-v1-service-https   NodePort    172.16.90.71    &lt;none&gt;        80:31391/TCP                 3m49s

NAME                                      READY   UP-TO-DATE   AVAILABLE   AGE
deployment.apps/drupal-dummy-404-v1-pod   2/2     2            2           2m32s
deployment.apps/drupal-dummy-v1-pod       2/2     2            2           3m58s

NAME                                                 DESIRED   CURRENT   READY   AGE
replicaset.apps/drupal-dummy-404-v1-pod-744454b7ff   2         2         2       2m32s
replicaset.apps/drupal-dummy-v1-pod-77f5bf55c6       2         2         2       3m58s

NAME                                                         AGE
managedcertificate.networking.gke.io/d8.syspod.fr            161m
managedcertificate.networking.gke.io/d8gfi.syspod.fr         128m
managedcertificate.networking.gke.io/dummydrupald8.cnes.fr   162m

NAME                                               HOSTS                                                ADDRESS          PORTS   AGE
ingress.extensions/drupal-dummy-v1-service-https   d8gfi.syspod.fr   34.120.106.136   80      3m50s
</code></pre>
<p>Another test has to pre-launch two services, one for each deployment and just update the Ingress Helm deployment changing this time &quot;{{ $.Values.Service.Name }}&quot;, same problem, and the site indisponibility is here from 60s to 300s.</p>
<p>Here is the status of all my namespace objects (for this second test) :</p>
<pre><code>root@47475bc8c41f:/opt/bin# k get all,svc,ingress,managedcertificates
NAME                                           READY   STATUS    RESTARTS   AGE
pod/drupal-dummy-404-v1-pod-744454b7ff-8r5pm   1/1     Running   0          26m
pod/drupal-dummy-404-v1-pod-744454b7ff-9cplz   1/1     Running   0          26m
pod/drupal-dummy-v1-pod-77f5bf55c6-56dnr       1/1     Running   0          30m
pod/drupal-dummy-v1-pod-77f5bf55c6-mg95j       1/1     Running   0          30m

NAME                                    TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                      AGE
service/drupal-dummy-404-v1-pod-https   NodePort    172.16.106.121   &lt;none&gt;        80:31030/TCP                 26m
service/drupal-dummy-v1-pod-https       NodePort    172.16.245.251   &lt;none&gt;        80:31759/TCP                 27m

NAME                                      READY   UP-TO-DATE   AVAILABLE   AGE
deployment.apps/drupal-dummy-404-v1-pod   2/2     2            2           26m
deployment.apps/drupal-dummy-v1-pod       2/2     2            2           30m

NAME                                                 DESIRED   CURRENT   READY   AGE
replicaset.apps/bastion-66bb77bfd5                   1         1         1       148m
replicaset.apps/drupal-dummy-404-v1-pod-744454b7ff   2         2         2       26m
replicaset.apps/drupal-dummy-v1-pod-77f5bf55c6       2         2         2       30m

NAME                                               HOSTS                                                ADDRESS          PORTS   AGE
ingress.extensions/drupal-dummy-v1-service-https   d8gfi.syspod.fr   34.120.106.136   80      14m
</code></pre>
<p>Does anybody have any explanation (and solution) ?</p>
<hr />
<p>Added deployment DUMP (sure something is missing but I don't see) :</p>
<pre><code>root@c55834fbdf1a:/# k get deployment.apps/drupal-dummy-v1-pod -o json
{
    &quot;apiVersion&quot;: &quot;apps/v1&quot;,
    &quot;kind&quot;: &quot;Deployment&quot;,
    &quot;metadata&quot;: {
        &quot;annotations&quot;: {
            &quot;deployment.kubernetes.io/revision&quot;: &quot;2&quot;,
            &quot;meta.helm.sh/release-name&quot;: &quot;drupal-dummy-v1-pod&quot;,
            &quot;meta.helm.sh/release-namespace&quot;: &quot;e1&quot;
        },
        &quot;creationTimestamp&quot;: &quot;2020-06-23T18:49:59Z&quot;,
        &quot;generation&quot;: 2,
        &quot;labels&quot;: {
            &quot;app.kubernetes.io/managed-by&quot;: &quot;Helm&quot;,
            &quot;environment&quot;: &quot;e1&quot;,
            &quot;name&quot;: &quot;drupal-dummy-v1-pod&quot;,
            &quot;type&quot;: &quot;dep&quot;
        },
        &quot;name&quot;: &quot;drupal-dummy-v1-pod&quot;,
        &quot;namespace&quot;: &quot;e1&quot;,
        &quot;resourceVersion&quot;: &quot;3977170&quot;,
        &quot;selfLink&quot;: &quot;/apis/apps/v1/namespaces/e1/deployments/drupal-dummy-v1-pod&quot;,
        &quot;uid&quot;: &quot;56f74fb9-b582-11ea-9df2-42010a000006&quot;
    },
    &quot;spec&quot;: {
        &quot;progressDeadlineSeconds&quot;: 600,
        &quot;replicas&quot;: 2,
        &quot;revisionHistoryLimit&quot;: 10,
        &quot;selector&quot;: {
            &quot;matchLabels&quot;: {
                &quot;environment&quot;: &quot;e1&quot;,
                &quot;name&quot;: &quot;drupal-dummy-v1-pod&quot;,
                &quot;type&quot;: &quot;dep&quot;
            }
        },
        &quot;strategy&quot;: {
            &quot;rollingUpdate&quot;: {
                &quot;maxSurge&quot;: &quot;25%&quot;,
                &quot;maxUnavailable&quot;: &quot;25%&quot;
            },
            &quot;type&quot;: &quot;RollingUpdate&quot;
        },
        &quot;template&quot;: {
            &quot;metadata&quot;: {
                &quot;creationTimestamp&quot;: null,
                &quot;labels&quot;: {
                    &quot;environment&quot;: &quot;e1&quot;,
                    &quot;name&quot;: &quot;drupal-dummy-v1-pod&quot;,
                    &quot;type&quot;: &quot;dep&quot;
                }
            },
            &quot;spec&quot;: {
                &quot;containers&quot;: [
                    {
                        &quot;env&quot;: [
                            {
                                &quot;name&quot;: &quot;APPLICATION&quot;,
                                &quot;value&quot;: &quot;drupal-dummy-v1-pod&quot;
                            },
                            {
                                &quot;name&quot;: &quot;DB_PASS&quot;,
                                &quot;valueFrom&quot;: {
                                    &quot;secretKeyRef&quot;: {
                                        &quot;key&quot;: &quot;password&quot;,
                                        &quot;name&quot;: &quot;dbpassword&quot;
                                    }
                                }
                            },
                            {
                                &quot;name&quot;: &quot;DB_FQDN&quot;,
                                &quot;valueFrom&quot;: {
                                    &quot;configMapKeyRef&quot;: {
                                        &quot;key&quot;: &quot;dbip&quot;,
                                        &quot;name&quot;: &quot;gcpenv&quot;
                                    }
                                }
                            },
                            {
                                &quot;name&quot;: &quot;DB_PORT&quot;,
                                &quot;valueFrom&quot;: {
                                    &quot;configMapKeyRef&quot;: {
                                        &quot;key&quot;: &quot;dbport&quot;,
                                        &quot;name&quot;: &quot;gcpenv&quot;
                                    }
                                }
                            },
                            {
                                &quot;name&quot;: &quot;DB_NAME&quot;,
                                &quot;valueFrom&quot;: {
                                    &quot;configMapKeyRef&quot;: {
                                        &quot;key&quot;: &quot;dbdatabase&quot;,
                                        &quot;name&quot;: &quot;gcpenv&quot;
                                    }
                                }
                            },
                            {
                                &quot;name&quot;: &quot;DB_USER&quot;,
                                &quot;valueFrom&quot;: {
                                    &quot;configMapKeyRef&quot;: {
                                        &quot;key&quot;: &quot;dbuser&quot;,
                                        &quot;name&quot;: &quot;gcpenv&quot;
                                    }
                                }
                            }
                        ],
                        &quot;image&quot;: &quot;eu.gcr.io/gke-drupal-276313/drupal-dummy:1.0.0&quot;,
                        &quot;imagePullPolicy&quot;: &quot;Always&quot;,
                        &quot;livenessProbe&quot;: {
                            &quot;failureThreshold&quot;: 3,
                            &quot;httpGet&quot;: {
                                &quot;path&quot;: &quot;/&quot;,
                                &quot;port&quot;: 80,
                                &quot;scheme&quot;: &quot;HTTP&quot;
                            },
                            &quot;initialDelaySeconds&quot;: 60,
                            &quot;periodSeconds&quot;: 10,
                            &quot;successThreshold&quot;: 1,
                            &quot;timeoutSeconds&quot;: 5
                        },
                        &quot;name&quot;: &quot;drupal-dummy-v1-pod&quot;,
                        &quot;ports&quot;: [
                            {
                                &quot;containerPort&quot;: 80,
                                &quot;protocol&quot;: &quot;TCP&quot;
                            }
                        ],
                        &quot;readinessProbe&quot;: {
                            &quot;failureThreshold&quot;: 3,
                            &quot;httpGet&quot;: {
                                &quot;path&quot;: &quot;/&quot;,
                                &quot;port&quot;: 80,
                                &quot;scheme&quot;: &quot;HTTP&quot;
                            },
                            &quot;initialDelaySeconds&quot;: 60,
                            &quot;periodSeconds&quot;: 10,
                            &quot;successThreshold&quot;: 1,
                            &quot;timeoutSeconds&quot;: 5
                        },
                        &quot;resources&quot;: {},
                        &quot;terminationMessagePath&quot;: &quot;/dev/termination-log&quot;,
                        &quot;terminationMessagePolicy&quot;: &quot;File&quot;,
                        &quot;volumeMounts&quot;: [
                            {
                                &quot;mountPath&quot;: &quot;/var/www/html/sites/default&quot;,
                                &quot;name&quot;: &quot;drupal-dummy-v1-pod&quot;
                            }
                        ]
                    }
                ],
                &quot;dnsPolicy&quot;: &quot;ClusterFirst&quot;,
                &quot;restartPolicy&quot;: &quot;Always&quot;,
                &quot;schedulerName&quot;: &quot;default-scheduler&quot;,
                &quot;securityContext&quot;: {},
                &quot;terminationGracePeriodSeconds&quot;: 30,
                &quot;volumes&quot;: [
                    {
                        &quot;name&quot;: &quot;drupal-dummy-v1-pod&quot;,
                        &quot;persistentVolumeClaim&quot;: {
                            &quot;claimName&quot;: &quot;drupal-dummy-v1-pod&quot;
                        }
                    }
                ]
            }
        }
    },
    &quot;status&quot;: {
        &quot;availableReplicas&quot;: 2,
        &quot;conditions&quot;: [
            {
                &quot;lastTransitionTime&quot;: &quot;2020-06-23T18:56:05Z&quot;,
                &quot;lastUpdateTime&quot;: &quot;2020-06-23T18:56:05Z&quot;,
                &quot;message&quot;: &quot;Deployment has minimum availability.&quot;,
                &quot;reason&quot;: &quot;MinimumReplicasAvailable&quot;,
                &quot;status&quot;: &quot;True&quot;,
                &quot;type&quot;: &quot;Available&quot;
            },
            {
                &quot;lastTransitionTime&quot;: &quot;2020-06-23T18:49:59Z&quot;,
                &quot;lastUpdateTime&quot;: &quot;2020-06-23T18:56:05Z&quot;,
                &quot;message&quot;: &quot;ReplicaSet \&quot;drupal-dummy-v1-pod-6865d969cd\&quot; has successfully progressed.&quot;,
                &quot;reason&quot;: &quot;NewReplicaSetAvailable&quot;,
                &quot;status&quot;: &quot;True&quot;,
                &quot;type&quot;: &quot;Progressing&quot;
            }
        ],
        &quot;observedGeneration&quot;: 2,
        &quot;readyReplicas&quot;: 2,
        &quot;replicas&quot;: 2,
        &quot;updatedReplicas&quot;: 2
    }
}
</code></pre>
<p>Here service DUMP too :</p>
<pre><code>root@c55834fbdf1a:/# k get service/drupal-dummy-v1-service-https -o json
{
    &quot;apiVersion&quot;: &quot;v1&quot;,
    &quot;kind&quot;: &quot;Service&quot;,
    &quot;metadata&quot;: {
        &quot;annotations&quot;: {
            &quot;beta.cloud.google.com/backend-config&quot;: &quot;{\&quot;ports\&quot;: {\&quot;80\&quot;:\&quot;drupal-dummy-v1-service-https\&quot;}}&quot;,
            &quot;cloud.google.com/neg&quot;: &quot;{\&quot;ingress\&quot;: true}&quot;,
            &quot;cloud.google.com/neg-status&quot;: &quot;{\&quot;network_endpoint_groups\&quot;:{\&quot;80\&quot;:\&quot;k8s1-4846660e-e1-drupal-dummy-v1-service-https-80-36c11551\&quot;},\&quot;zones\&quot;:[\&quot;europe-west3-a\&quot;,\&quot;europe-west3-b\&quot;]}&quot;,
            &quot;meta.helm.sh/release-name&quot;: &quot;drupal-dummy-v1-service&quot;,
            &quot;meta.helm.sh/release-namespace&quot;: &quot;e1&quot;
        },
        &quot;creationTimestamp&quot;: &quot;2020-06-23T18:50:45Z&quot;,
        &quot;labels&quot;: {
            &quot;app&quot;: &quot;drupal-dummy-v1-service&quot;,
            &quot;app.kubernetes.io/managed-by&quot;: &quot;Helm&quot;,
            &quot;environment&quot;: &quot;e1&quot;,
            &quot;name&quot;: &quot;drupal-dummy-v1-service&quot;,
            &quot;type&quot;: &quot;svc&quot;
        },
        &quot;name&quot;: &quot;drupal-dummy-v1-service-https&quot;,
        &quot;namespace&quot;: &quot;e1&quot;,
        &quot;resourceVersion&quot;: &quot;3982781&quot;,
        &quot;selfLink&quot;: &quot;/api/v1/namespaces/e1/services/drupal-dummy-v1-service-https&quot;,
        &quot;uid&quot;: &quot;722d3a99-b582-11ea-9df2-42010a000006&quot;
    },
    &quot;spec&quot;: {
        &quot;clusterIP&quot;: &quot;172.16.103.181&quot;,
        &quot;externalTrafficPolicy&quot;: &quot;Cluster&quot;,
        &quot;ports&quot;: [
            {
                &quot;nodePort&quot;: 32396,
                &quot;port&quot;: 80,
                &quot;protocol&quot;: &quot;TCP&quot;,
                &quot;targetPort&quot;: 80
            }
        ],
        &quot;selector&quot;: {
            &quot;environment&quot;: &quot;e1&quot;,
            &quot;name&quot;: &quot;drupal-dummy-v1-pod&quot;
        },
        &quot;sessionAffinity&quot;: &quot;None&quot;,
        &quot;type&quot;: &quot;NodePort&quot;
    },
    &quot;status&quot;: {
        &quot;loadBalancer&quot;: {}
    }
}
</code></pre>
<p>And ingress one :</p>
<pre><code>root@c55834fbdf1a:/# k get ingress.extensions/drupal-dummy-v1-service-https -o json
{
    &quot;apiVersion&quot;: &quot;extensions/v1beta1&quot;,
    &quot;kind&quot;: &quot;Ingress&quot;,
    &quot;metadata&quot;: {
        &quot;annotations&quot;: {
            &quot;ingress.gcp.kubernetes.io/pre-shared-cert&quot;: &quot;mcrt-a15e339b-6c3f-4f23-8f6b-688dc98b33a6,mcrt-f3a385de-0541-4b9c-8047-6dcfcbd4d74f&quot;,
            &quot;ingress.kubernetes.io/backends&quot;: &quot;{\&quot;k8s1-4846660e-e1-drupal-dummy-v1-service-https-80-36c11551\&quot;:\&quot;HEALTHY\&quot;}&quot;,
            &quot;ingress.kubernetes.io/forwarding-rule&quot;: &quot;k8s-fw-e1-drupal-dummy-v1-service-https--4846660e8b9bd880&quot;,
            &quot;ingress.kubernetes.io/https-forwarding-rule&quot;: &quot;k8s-fws-e1-drupal-dummy-v1-service-https--4846660e8b9bd880&quot;,
            &quot;ingress.kubernetes.io/https-target-proxy&quot;: &quot;k8s-tps-e1-drupal-dummy-v1-service-https--4846660e8b9bd880&quot;,
            &quot;ingress.kubernetes.io/ssl-cert&quot;: &quot;mcrt-a15e339b-6c3f-4f23-8f6b-688dc98b33a6,mcrt-f3a385de-0541-4b9c-8047-6dcfcbd4d74f&quot;,
            &quot;ingress.kubernetes.io/target-proxy&quot;: &quot;k8s-tp-e1-drupal-dummy-v1-service-https--4846660e8b9bd880&quot;,
            &quot;ingress.kubernetes.io/url-map&quot;: &quot;k8s-um-e1-drupal-dummy-v1-service-https--4846660e8b9bd880&quot;,
            &quot;kubernetes.io/ingress.global-static-ip-name&quot;: &quot;gkxe-k1312-e1-drupal-dummy-v1&quot;,
            &quot;meta.helm.sh/release-name&quot;: &quot;drupal-dummy-v1-service&quot;,
            &quot;meta.helm.sh/release-namespace&quot;: &quot;e1&quot;,
            &quot;networking.gke.io/managed-certificates&quot;: &quot;dummydrupald8.cnes.fr,d8.syspod.fr&quot;,
            &quot;nginx.ingress.kubernetes.io/rewrite-target&quot;: &quot;/&quot;
        },
        &quot;creationTimestamp&quot;: &quot;2020-06-23T18:50:45Z&quot;,
        &quot;generation&quot;: 1,
        &quot;labels&quot;: {
            &quot;app&quot;: &quot;drupal-dummy-v1-service&quot;,
            &quot;app.kubernetes.io/managed-by&quot;: &quot;Helm&quot;,
            &quot;environment&quot;: &quot;e1&quot;,
            &quot;name&quot;: &quot;drupal-dummy-v1-service&quot;,
            &quot;type&quot;: &quot;ingress&quot;
        },
        &quot;name&quot;: &quot;drupal-dummy-v1-service-https&quot;,
        &quot;namespace&quot;: &quot;e1&quot;,
        &quot;resourceVersion&quot;: &quot;3978178&quot;,
        &quot;selfLink&quot;: &quot;/apis/extensions/v1beta1/namespaces/e1/ingresses/drupal-dummy-v1-service-https&quot;,
        &quot;uid&quot;: &quot;7237fc51-b582-11ea-9df2-42010a000006&quot;
    },
    &quot;spec&quot;: {
        &quot;backend&quot;: {
            &quot;serviceName&quot;: &quot;drupal-dummy-v1-service-https&quot;,
            &quot;servicePort&quot;: 80
        },
        &quot;rules&quot;: [
            {
                &quot;host&quot;: &quot;dummydrupald8.cnes.fr&quot;,
                &quot;http&quot;: {
                    &quot;paths&quot;: [
                        {
                            &quot;backend&quot;: {
                                &quot;serviceName&quot;: &quot;drupal-dummy-v1-service-https&quot;,
                                &quot;servicePort&quot;: 80
                            }
                        }
                    ]
                }
            },
            {
                &quot;host&quot;: &quot;d8.syspod.fr&quot;,
                &quot;http&quot;: {
                    &quot;paths&quot;: [
                        {
                            &quot;backend&quot;: {
                                &quot;serviceName&quot;: &quot;drupal-dummy-v1-service-https&quot;,
                                &quot;servicePort&quot;: 80
                            }
                        }
                    ]
                }
            }
        ]
    },
    &quot;status&quot;: {
        &quot;loadBalancer&quot;: {
            &quot;ingress&quot;: [
                {
                    &quot;ip&quot;: &quot;34.98.97.102&quot;
                }
            ]
        }
    }
}
</code></pre>
<hr />
<p>I have seen that in kubernetes events (only when I reconfigure my service selector to target first or second deployment).</p>
<p>Switch to indisponibility page (3 seconds 502) :</p>
<pre><code>81s         Normal    Attach                    service/drupal-dummy-v1-service-https           Attach 1 network endpoint(s) (NEG &quot;k8s1-4846660e-e1-drupal-dummy-v1-service-https-80-36c11551&quot; in zone &quot;europe-west3-b&quot;)
78s         Normal    Attach                    service/drupal-dummy-v1-service-https           Attach 1 network endpoint(s) (NEG &quot;k8s1-4846660e-e1-drupal-dummy-v1-service-https-80-36c11551&quot; in zone &quot;europe-west3-a&quot;)
</code></pre>
<p>Switch back to application (15 seconds 502 -&gt; Never the same duration):</p>
<pre><code>7s          Normal    Attach                    service/drupal-dummy-v1-service-https           Attach 1 network endpoint(s) (NEG &quot;k8s1-4846660e-e1-drupal-dummy-v1-service-https-80-36c11551&quot; in zone &quot;europe-west3-a&quot;)
7s          Normal    Attach                    service/drupal-dummy-v1-service-https           Attach 1 network endpoint(s) (NEG &quot;k8s1-4846660e-e1-drupal-dummy-v1-service-https-80-36c11551&quot; in zone &quot;europe-west3-b&quot;)
</code></pre>
<p>I could check that the NEG events appear just before 502 error ends, I suspect that when we change service definition a new NEG is implemented but the time is not immediate, and while we wait to have it we still not have the old service up and there is no service during this time :(</p>
<p>There is no &quot;rolling update&quot; of services definition ?</p>

Philippe Cerou
<p>No solution at all, even with having two services and just upgrading the Ingress. Seen witn GCP support, GKE will always destroy then recretate something it is not possible to do any rolling update of service or ingress with no downtime. They suggest to have two full silos then play with DNS, we have chosen another solution, having only one deployment and just do a simple rolling update of deployment changing referenced docker image. Not really in the target, but it works...</p>
