Questions tagged [istio-gateway]
252 questions
5
votes
1 answer
Nginx returns 426
When I am accessing a Istio gateway NodePort from the Nginx server using curl, I am getting response properly, like below:
curl -v "http://52.66.195.124:30408/status/200"
* Trying 52.66.195.124:30408...
* Connected to 52.66.195.124 (52.66.195.124)…

Rahul Radhakrishnan
- 769
- 6
- 13
5
votes
0 answers
How to configure istio for mesh federation without service discovery
Multi-trust deployment model from istio documentation
I want to connect multiple meshes together. I currently manage 3 different AKS clusters
Operations (aks-ops-euwest-1)
Staging (aks-stg-euwest-1)
Production (aks-prod-euwest-1)
I have Hashicorp…

Ludovic C
- 2,855
- 20
- 40
4
votes
0 answers
Envoy based header to metadata filtering regex not working
My use case is to remove query parameters from the path so the envoy ISTIO filter can filter on the basis of just APIs.
I am using the below configuration it is a filtering route but also takes query parameters in the path not truncating it.
The…

NecessaryDevil
- 105
- 1
- 10
4
votes
1 answer
Kong with AWS Application Load Balancer
I was trying to create an alb-ingress-controller and point to kong-proxy. Since kong controller supports only classic loadbalancer and network loadbalancer
I followed all the mentioned steps from…

VINAY KUMAR RT
- 43
- 3
4
votes
1 answer
NR filter_chain_not_found when connecting to Nodejs TLS server using istio
I created a node js TLS server, dockerized it, and created a K8S Deployment and ClusterIP service for it. I created a DNS for the LoadBalancer service external IP of istio-ingressgateway and I’m using this DNS to try access this TLS server using…

Kareem Yasser
- 122
- 1
- 3
4
votes
2 answers
Istio Virtualservice creation access denied
I am trying to create an Istio Virtualservice. However, I am getting the below error, despite me having the cluster-admin role bound to.
UPGRADE FAILED: could not get information about the resource: virtualservices.networking.istio.io "admin-ui" is…

Vaishnav
- 611
- 1
- 9
- 23
4
votes
2 answers
Kubernetes postStart lifecycle always failing
Trying to solve dependency between pods using postStart lifecycle.
Use case: micro service A should start after the start of micro service B.
For that we have added one container (curl) which will check if dependent service is up or not using curl…

Ankita Sawant
- 181
- 2
- 10
3
votes
1 answer
VirtualService not recognized in mesh with mutualTLS and https port name
In our kubernetes cluster we are using istio, with mutual tls for the communication between the pods inside the mesh. Everything is working fine, but now we would like to introduce a VirtualService to able to do traffic shifting for canary…

badger864
- 31
- 3
3
votes
3 answers
AKS ISTIO Gateway is not accessiable
I have created an AKS cluster using the following Terraform code
resource "azurerm_virtual_network" "test" {
name = var.virtual_network_name
location = azurerm_resource_group.rg.location
resource_group_name =…

One Developer
- 99
- 5
- 43
- 103
3
votes
0 answers
Istio: upstream connect error or disconnect/reset before headers. reason: connection failure, transport failure reason: TLS
I'm following this:
https://istio.io/latest/docs/tasks/traffic-management/request-routing/
and stopped my Docker Desktop environment for a few days before resuming.
It was working fine then.
Now, however, if I go to http://localhost/productpage
I…

Snowcrash
- 80,579
- 89
- 266
- 376
3
votes
0 answers
Virtual Service retry with the mesh gateway
If the virtual service is used with the mesh gateway then retryRemoteLocalities and attempts are not working. Is it by design or I am missing something?
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: myapp
spec:
…

Jonas
- 4,683
- 4
- 45
- 81
3
votes
0 answers
Slow Istio setup
I run a bare-metal Kubernetes cluster on 7 Raspberry Pi 4b with 8GB each.
I also installed Flannel for the communication between the nodes, MetalLB to have an external Load Balancer, and Istio to handle the incoming traffic.
To test my setup I run a…

Ralph Bergmann
- 3,015
- 4
- 30
- 61
3
votes
0 answers
Does Istio not support wss?
Although I have read many articles, it seems that few people are discussing this problem, and I have not seen any solutions. I would like to know whether wss is not supported after using Istio as the entry point? According to my test, it seems that…

gmc
- 39
- 1
3
votes
0 answers
istio oauth filter error with secrets creation - updating listener(s) 0.0.0.0_8443: paths must refer to an existing path in the system does not exist
I'm running istio on kubernetes (container istio/proxyv2:1.13.2) and currently use oauth2-proxy pod to authenticate with keycloak. I have a requirement to replace oauth2-proxy with an istio oauth filter, and I'm attempting to deploy the oauth filter…

northerndev
- 31
- 2
3
votes
0 answers
Istio with single sign-on in Azure Active Directory(Microsoft SSO) is not working
We have deployed istio version 1.11.0 in the GKE cluster.
Traffic flow looks like this:
GCP Https Loadbalancer >> Istio ingress gateway (cluster ip service) >> web application.
Gateway.yaml
apiVersion: networking.istio.io/v1alpha3
kind:…

Ankita Sawant
- 181
- 2
- 10