"server closed the stream without sending trailers" error on endpoint with Google managed SSL

[yak1dango]

I have a setup that:

1. server is a golang server exposing gRPC service

2. the server is defined in k8s config with Envoy as sidecar

3. I'm using GKE with GKE ingress with static IP, with host using ManagedCertificate

config as follows:

apiVersion: networking.gke.io/v1
kind: ManagedCertificate
metadata:
  name: gb-mngd-cert
spec:
  domains:
    - "api-gb-v0.r-kyve.com"
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: gb-srv-ingress
  annotations:
    kubernetes.io/ingress.global-static-ip-name: gb-srv-ipv4-global
    networking.gke.io/managed-certificates: gb-mngd-cert
    kubernetes.io/ingress.class: "gce"
    kubernetes.io/ingress.allow-http: "false"
  labels:
    app: gummybear-server
spec:
  rules:
    - host: api-gb-v0.r-kyve.com
      http:
        paths:
          - path: /grpcw
            pathType: Prefix
            backend:
              service:
                name: gummybear-server-svc
                port:
                  number: 80
          - path: /
            pathType: Prefix
            backend:
              service:
                name: gummybear-server-svc
                port:
                  number: 50051

I got "server closed the stream without sending trailers" error when connecting to 

api-gb-v0.r-kyve.com:443 using TLS, but no error if I connect directly to the load balance endpoint in GKE w/o using TLS.

[nmagcalengjr]

Hi @yak1dango,

Welcome to Google Cloud Community!

It appears that a more thorough investigation of your project is necessary. For more detailed insights you may reach out to Google Cloud Support for assistance.