From c29e1fce460593874a300645e63abd250f4f50df Mon Sep 17 00:00:00 2001 From: Vaibhav Pathak Date: Thu, 12 Feb 2026 16:36:03 +0530 Subject: [PATCH] Fix CloudSQL proxy labels to not match Backstage service selector The CloudSQL proxy pod was using backstage.selectorLabels which made it match the Backstage service selector (app.kubernetes.io/name: backstage, app.kubernetes.io/instance: backstage). This caused Traefik to sometimes route requests to the CloudSQL proxy instead of Backstage, resulting in 502 errors. Changed pod labels to use distinct values (backstage-cloudsql-proxy) so the pod is not selected by the Backstage service. Co-Authored-By: Claude Opus 4.5 --- templates/cloudsql-proxy-deployment.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/templates/cloudsql-proxy-deployment.yaml b/templates/cloudsql-proxy-deployment.yaml index 8fbcde5..1c8c78b 100644 --- a/templates/cloudsql-proxy-deployment.yaml +++ b/templates/cloudsql-proxy-deployment.yaml @@ -16,7 +16,8 @@ spec: metadata: labels: app: backstage-cloudsql-proxy - {{- include "backstage.selectorLabels" . | nindent 8 }} + app.kubernetes.io/name: backstage-cloudsql-proxy + app.kubernetes.io/instance: backstage-cloudsql-proxy spec: serviceAccountName: {{ .Values.cloudSqlProxyServiceAccount.name }} automountServiceAccountToken: true