# Pomerium sync error: no healthy upstream

**URL:** <https://discuss.pomerium.com/t/pomerium-sync-error-no-healthy-upstream/223>\
**Category:** Support\
**Tags:** k8s\
**Created:** [January 11, 2023, 11:02pm UTC](https://discuss.pomerium.com/t/pomerium-sync-error-no-healthy-upstream/223 "2023-01-11T23:02:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Wijxex](https://avatars.discourse-cdn.com/v4/letter/w/7ea924/32.png) [@Wijxex](https://discuss.pomerium.com/u/Wijxex)\
**Post date:** [January 11, 2023, 11:02pm UTC](https://discuss.pomerium.com/t/pomerium-sync-error-no-healthy-upstream/223/1 "2023-01-11T23:02:11Z")

</div>

## What happened?

I am upgrading Pomerium from pomerium/pomerium:v0.5.0 → pomerium/pomerium:main so I configured the authenticate/authorize/databroker/proxy services and deployments + ingress + config as configured here : [pomerium/examples/kubernetes at main · pomerium/pomerium · GitHub](https://github.com/pomerium/pomerium/tree/main/examples/kubernetes)

## What did you expect to happen?

I expect to access my services.

## How’d it happen?

1. Enter one of my routes
2. I get the access identification page
3. If the email is correct, I access the service succesfully.

## What’s your environment like?

- Pomerium version: main image
- Kubernetes version: 1.21.14-gke.3000

## What’s your config.yaml?

```auto
address: ":80"
grpc_address: ":80"
grpc_insecure: true
insecure_server: true
administrators: "username1@hello.com,username2@hello.com"

authenticate_service_url: https://auth-pre.hello.team
authorize_service_url: https://pomerium-authz.hello-sys-security.svc.cluster.local
databroker_service_url: http://pomerium-databroker-service.hello-sys-security.svc.cluster.local

###################
idp_provider: google
idp_client_id: <client_id>
idp_client_secret: <client_secret>
###################

routes:
  - from: https://grafana-pre.hello.team
    to: http://grafana-service.hello-sys-monitoring.svc.cluster.local:3000
    allowed_domains:
      - hello.com
  - from: https://prometheus-pre.hello.team
    to: http://prometheus.hello-sys-monitoring.svc.cluster.local:9090
    allowed_domains:
      - hello.com
  - from: https://alertmanager-pre.hello.team
    to: http://alertmanager-alerts.hello-sys-monitoring.svc.cluster.local:9093
    allowed_domains:
      - hello.com
  - from: https://wiki.hello.team
    to: http://wiki-4all.dev-tools.svc.cluster.local:3000
    allow_public_unauthenticated_access: true
  - from: https://monitoring-pre.hello.team
    to: http://monitoring-proxy.hello-sys-monitoring.svc.cluster.local:8080
# allowed_domains:
 # - hello.com
 # cors_allow_preflight: true
    policy:
      - allow:
          or:
            - domain:
                is: hello.com

```

## What did you see in the logs?

```logs
error during initial sync: error receiving record: rpc error: code = Unavailable desc = no healthy upstream

syncer_id: "databroker"
syncer_type: "type.googleapis.com/pomerium.config.Config"

```

## Additional context

I deleted the old Pomerium and kept the same idp/shared/cookie secrets.

---

<div class="post-metadata">

**Author:** ![denis](https://avatars.discourse-cdn.com/v4/letter/d/5e9695/32.png) [@denis](https://discuss.pomerium.com/u/denis)\
**Post date:** [January 11, 2023, 11:36pm UTC](https://discuss.pomerium.com/t/pomerium-sync-error-no-healthy-upstream/223/2 "2023-01-11T23:36:00Z")

</div>

Check the status of your databroker service and endpoints - no healthy upstream means it cannot be contacted

However I would recommend you to use the simpler all in one deployment [Installation | Pomerium](https://www.pomerium.com/docs/deploying/k8s/install)

---

<div class="post-metadata">

**Author:** ![Wijxex](https://avatars.discourse-cdn.com/v4/letter/w/7ea924/32.png) [@Wijxex](https://discuss.pomerium.com/u/Wijxex)\
**Post date:** [January 12, 2023, 9:25am UTC](https://discuss.pomerium.com/t/pomerium-sync-error-no-healthy-upstream/223/3 "2023-01-12T09:25:08Z")

</div>

Thank you for the reply.  
It’s mentioned in the requirements that I need PostgreSQL 11 or higher installed in my cluster, I would like to understand the purpose of it when installing the latest version of Pomerium?

---

<div class="post-metadata">

**Author:** ![denis](https://avatars.discourse-cdn.com/v4/letter/d/5e9695/32.png) [@denis](https://discuss.pomerium.com/u/denis)\
**Post date:** [January 12, 2023, 4:54pm UTC](https://discuss.pomerium.com/t/pomerium-sync-error-no-healthy-upstream/223/4 "2023-01-12T16:54:11Z")

</div>

> **[Persistance | Pomerium](https://www.pomerium.com/docs/internals/data-storage)**
>
> This article describes Pomerium's data storage requirements and backends