Questions tagged [istio-gateway]

252 questions
5
votes
1 answer

Nginx returns 426

When I am accessing a Istio gateway NodePort from the Nginx server using curl, I am getting response properly, like below: curl -v "http://52.66.195.124:30408/status/200" * Trying 52.66.195.124:30408... * Connected to 52.66.195.124 (52.66.195.124)…
5
votes
0 answers

How to configure istio for mesh federation without service discovery

Multi-trust deployment model from istio documentation I want to connect multiple meshes together. I currently manage 3 different AKS clusters Operations (aks-ops-euwest-1) Staging (aks-stg-euwest-1) Production (aks-prod-euwest-1) I have Hashicorp…
Ludovic C
  • 2,855
  • 20
  • 40
4
votes
0 answers

Envoy based header to metadata filtering regex not working

My use case is to remove query parameters from the path so the envoy ISTIO filter can filter on the basis of just APIs. I am using the below configuration it is a filtering route but also takes query parameters in the path not truncating it. The…
NecessaryDevil
  • 105
  • 1
  • 10
4
votes
1 answer

Kong with AWS Application Load Balancer

I was trying to create an alb-ingress-controller and point to kong-proxy. Since kong controller supports only classic loadbalancer and network loadbalancer I followed all the mentioned steps from…
4
votes
1 answer

NR filter_chain_not_found when connecting to Nodejs TLS server using istio

I created a node js TLS server, dockerized it, and created a K8S Deployment and ClusterIP service for it. I created a DNS for the LoadBalancer service external IP of istio-ingressgateway and I’m using this DNS to try access this TLS server using…
4
votes
2 answers

Istio Virtualservice creation access denied

I am trying to create an Istio Virtualservice. However, I am getting the below error, despite me having the cluster-admin role bound to. UPGRADE FAILED: could not get information about the resource: virtualservices.networking.istio.io "admin-ui" is…
Vaishnav
  • 611
  • 1
  • 9
  • 23
4
votes
2 answers

Kubernetes postStart lifecycle always failing

Trying to solve dependency between pods using postStart lifecycle. Use case: micro service A should start after the start of micro service B. For that we have added one container (curl) which will check if dependent service is up or not using curl…
Ankita Sawant
  • 181
  • 2
  • 10
3
votes
1 answer

VirtualService not recognized in mesh with mutualTLS and https port name

In our kubernetes cluster we are using istio, with mutual tls for the communication between the pods inside the mesh. Everything is working fine, but now we would like to introduce a VirtualService to able to do traffic shifting for canary…
badger864
  • 31
  • 3
3
votes
3 answers

AKS ISTIO Gateway is not accessiable

I have created an AKS cluster using the following Terraform code resource "azurerm_virtual_network" "test" { name = var.virtual_network_name location = azurerm_resource_group.rg.location resource_group_name =…
One Developer
  • 99
  • 5
  • 43
  • 103
3
votes
0 answers

Istio: upstream connect error or disconnect/reset before headers. reason: connection failure, transport failure reason: TLS

I'm following this: https://istio.io/latest/docs/tasks/traffic-management/request-routing/ and stopped my Docker Desktop environment for a few days before resuming. It was working fine then. Now, however, if I go to http://localhost/productpage I…
Snowcrash
  • 80,579
  • 89
  • 266
  • 376
3
votes
0 answers

Virtual Service retry with the mesh gateway

If the virtual service is used with the mesh gateway then retryRemoteLocalities and attempts are not working. Is it by design or I am missing something? apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: myapp spec: …
Jonas
  • 4,683
  • 4
  • 45
  • 81
3
votes
0 answers

Slow Istio setup

I run a bare-metal Kubernetes cluster on 7 Raspberry Pi 4b with 8GB each. I also installed Flannel for the communication between the nodes, MetalLB to have an external Load Balancer, and Istio to handle the incoming traffic. To test my setup I run a…
Ralph Bergmann
  • 3,015
  • 4
  • 30
  • 61
3
votes
0 answers

Does Istio not support wss?

Although I have read many articles, it seems that few people are discussing this problem, and I have not seen any solutions. I would like to know whether wss is not supported after using Istio as the entry point? According to my test, it seems that…
gmc
  • 39
  • 1
3
votes
0 answers

istio oauth filter error with secrets creation - updating listener(s) 0.0.0.0_8443: paths must refer to an existing path in the system does not exist

I'm running istio on kubernetes (container istio/proxyv2:1.13.2) and currently use oauth2-proxy pod to authenticate with keycloak. I have a requirement to replace oauth2-proxy with an istio oauth filter, and I'm attempting to deploy the oauth filter…
3
votes
0 answers

Istio with single sign-on in Azure Active Directory(Microsoft SSO) is not working

We have deployed istio version 1.11.0 in the GKE cluster. Traffic flow looks like this: GCP Https Loadbalancer >> Istio ingress gateway (cluster ip service) >> web application. Gateway.yaml apiVersion: networking.istio.io/v1alpha3 kind:…
1
2 3
16 17