People who code: we want your input. Take the Survey

Questions tagged [istio]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
28 views

How to setup custom authentication and authorization in Istio/K8?

Let's say, I have a project that has 8 pods(services). I understand that authentication and authorization are covered in Istio Gateway using jwt. So that every request is verified. But users with ...
0
votes
0answers
30 views

aws-load-balancer-controller annotations not working

I'm trying to automatically start an ALB in my EKS cluster by using the aws-load-balancer-controller This is what the logs of my deployment look like: $ kubectl logs -n kube-system deployment.apps/aws-...
1
vote
1answer
52 views

Istio Keeps On Showing TcpProxyValidationError Errors

I initially created an EnvoyFilter to apply idle_timeout of 5s to outbound requests originating from workloads with label app: mecha-dev. apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter ...
0
votes
1answer
85 views

Why is My Istio EnvoyFilter with TCP Idle Timeout Setting not working?

I have created an EnvoyFilter to apply TCP idle timeout to outbound requests. Here's my filter configuration: apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: name: tcp-idle-...
0
votes
1answer
29 views

Istio Multi-master Multi-network Locality Failover Woes

I can't get "multi-primary multi-network" to play nice with locality failover (or locality load balancing for that matter). The endpoints are registered fine. The istio-system is labeled ...
0
votes
0answers
32 views

mTLS connection terminated due to missing client certifcate

We are getting intermittent (~100 every 2 to 3 hour) SSL handshake failure errors and packet capture shows that client certificate is missing in such cases. Please see attached screenshot. Client is ...
0
votes
0answers
46 views

Openshift Route - Cookie specification - Istio Routing

I have requirement to pass cookie or headers in openshift route to istio virtual service and decide the traffic routing based on cookie or header passed from route to virtualservice. Please share ...
2
votes
1answer
66 views

Jupyter notebook on kubernetes not being able to connect to outside docker service

Im running a kubernetes (kubeflow + k8s) pod with a jupyter notebook and a docker service outside of the kubernetes server, im currently trying to connect to a sql service but it keeps getting ...
1
vote
0answers
53 views

Istio Multicluster: Terminate mTLS at Ingress Gateway for Non-proxied Service

I am writing a service to coordinate Istio control planes in a "replicated control planes" configuration. I have managed to programmatically create ServiceEntry objects that correctly route ...
0
votes
0answers
24 views

Istio Multicluster between Microk8s (on GCE instance) and GKE custer

I'm trying to setup Istio 1.7 MultiCluster between Microk8s 1.18/Stable that is installed on Ubuntu 18.04 instance in Google Compute Engine and a GKE cluster. Everything is ok with GKE part. But I ...
1
vote
0answers
289 views

Istio egress gateway HANDSHAKE_FAILURE_ON_CLIENT_HELLO with custom certs

What we ware trying to achieve is point mesh traffic to an external service via an egressgateway. We tried several iterations, and now trying with an egressgateway in between. The external service is ...
0
votes
1answer
20 views

Canary with istio, what happen if app backend service is down/slow

App A is a Php application, service B is elasticsearch. A is deployed via istio, with canary pattern. A'canary and A'current use the same B service. If B is getting slow or down, A'canary and A'...
0
votes
0answers
34 views

Can a local proxy 'improve' network reliability?

Apologies for the fairly vague question but I have been working with Envoy as part of Istio recently and was wondering about one of the benefits of sidecar proxies in general By configuring a proxy ...
1
vote
1answer
2k views

istio-proxy 403 error:'upstream connect error or disconnect/reset before headers. reset reason: connection failure'

We have deployed an application behind the istio ingress gateway and is accessible at test.domain.com/jenkinscore.We have used istio 1.4.5. The domain name is created for the istio ingress gateway ...
0
votes
1answer
456 views

istio service mesh for east-west traffic management in kubernetes cluster

I am having the confusion regarding the some of use-case in our environment. First one is we will be having api gateway of our own for north/south traffic which our api gateway will be listening to ...
0
votes
1answer
177 views

Envoy/Istio as reverse-proxy to explicit IP

I'd like to route like this (nginx pseudo-config): server_name fou.example.com; location "/Forskning" { upstream https://185.102.32.26/; } location "/" { upstream http://fou-web.fou.svc.cluster....