Questions tagged [istio]
The istio tag has no usage guidance.
16
questions
1
vote
1answer
28 views
How to setup custom authentication and authorization in Istio/K8?
Let's say, I have a project that has 8 pods(services). I understand that authentication and authorization are covered in Istio Gateway using jwt. So that every request is verified. But users with ...
0
votes
0answers
30 views
aws-load-balancer-controller annotations not working
I'm trying to automatically start an ALB in my EKS cluster by using the aws-load-balancer-controller
This is what the logs of my deployment look like:
$ kubectl logs -n kube-system deployment.apps/aws-...
1
vote
1answer
52 views
Istio Keeps On Showing TcpProxyValidationError Errors
I initially created an EnvoyFilter to apply idle_timeout of 5s to outbound requests originating from workloads with label app: mecha-dev.
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
...
0
votes
1answer
85 views
Why is My Istio EnvoyFilter with TCP Idle Timeout Setting not working?
I have created an EnvoyFilter to apply TCP idle timeout to outbound requests. Here's my filter configuration:
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
name: tcp-idle-...
0
votes
1answer
29 views
Istio Multi-master Multi-network Locality Failover Woes
I can't get "multi-primary multi-network" to play nice with locality failover (or locality load balancing for that matter). The endpoints are registered fine. The istio-system is labeled ...
0
votes
0answers
32 views
mTLS connection terminated due to missing client certifcate
We are getting intermittent (~100 every 2 to 3 hour) SSL handshake failure errors and packet capture shows that client certificate is missing in such cases. Please see attached screenshot.
Client is ...
0
votes
0answers
46 views
Openshift Route - Cookie specification - Istio Routing
I have requirement to pass cookie or headers in openshift route to istio virtual service and decide the traffic routing based on cookie or header passed from route to virtualservice.
Please share ...
2
votes
1answer
66 views
Jupyter notebook on kubernetes not being able to connect to outside docker service
Im running a kubernetes (kubeflow + k8s) pod with a jupyter notebook and a docker service outside of the kubernetes server, im currently trying to connect to a sql service but it keeps getting ...
1
vote
0answers
53 views
Istio Multicluster: Terminate mTLS at Ingress Gateway for Non-proxied Service
I am writing a service to coordinate Istio control planes in a "replicated control planes" configuration. I have managed to programmatically create ServiceEntry objects that correctly route ...
0
votes
0answers
24 views
Istio Multicluster between Microk8s (on GCE instance) and GKE custer
I'm trying to setup Istio 1.7 MultiCluster between Microk8s 1.18/Stable that is installed on Ubuntu 18.04 instance in Google Compute Engine and a GKE cluster.
Everything is ok with GKE part. But I ...
google-cloud-platform
1
vote
0answers
289 views
Istio egress gateway HANDSHAKE_FAILURE_ON_CLIENT_HELLO with custom certs
What we ware trying to achieve is point mesh traffic to an external service via an egressgateway.
We tried several iterations, and now trying with an egressgateway in between.
The external service is ...
0
votes
1answer
20 views
Canary with istio, what happen if app backend service is down/slow
App A is a Php application, service B is elasticsearch.
A is deployed via istio, with canary pattern.
A'canary and A'current use the same B service.
If B is getting slow or down, A'canary and A'...
0
votes
0answers
34 views
Can a local proxy 'improve' network reliability?
Apologies for the fairly vague question but I have been working with Envoy as part of Istio recently and was wondering about one of the benefits of sidecar proxies in general
By configuring a proxy ...
1
vote
1answer
2k views
istio-proxy 403 error:'upstream connect error or disconnect/reset before headers. reset reason: connection failure'
We have deployed an application behind the istio ingress gateway and is accessible at test.domain.com/jenkinscore.We have used istio 1.4.5. The domain name is created for the istio ingress gateway ...
0
votes
1answer
456 views
istio service mesh for east-west traffic management in kubernetes cluster
I am having the confusion regarding the some of use-case in our environment. First one is we will be having api gateway of our own for north/south traffic which our api gateway will be listening to ...
0
votes
1answer
177 views
Envoy/Istio as reverse-proxy to explicit IP
I'd like to route like this (nginx pseudo-config):
server_name fou.example.com;
location "/Forskning" {
upstream https://185.102.32.26/;
}
location "/" {
upstream http://fou-web.fou.svc.cluster....
Related Tags
kubernetes × 6
envoyproxy × 5
docker × 2
proxy × 2
reverse-proxy × 2
ssl × 1
virtualization × 1
routing × 1
haproxy × 1
route × 1
ingress × 1
amazon-alb × 1
amazon-eks × 1
openshift × 1
microk8s × 1
canary × 1
more related tags
Hot Network Questions
- How do rhythm and melody compete and cooperate to define the horizontal space of music?
- What's the purpose of significant figures in measurements?
- Groups which maintain all their subgroups’ automorphisms as inner automorphisms
- How interpret 4 & 3 markings in these 2 bars? (Alkan - Prelude Opus 31 No 8 in A-flat minor)
- Photo Competition 2021-06-07: Long Exposure
- Why do escrow services use wire transfer?
- Collatz's ice cream cone factory
- Revisiting the unreasonable effectiveness of mathematics
- What are the extra human tubes used for?
- Can I swap a quad breaker for two double pole breakers?
- "It got me confused" - incorrect, then why "she got him confused by.." is correct?
- Space craft in a forest on a different planet, small glowing crystal
- 1970s Wonder Woman/Batman comic where they have to fight an evil Walt Disney
- Time gap between leaving the Earth's atmosphere and initiation of orbital motion by space shuttle
- What is the meaning of Uma?
- Engineering Best Practice: Rev control for trial parts after release?
- What is "Horse and Pony II", created by the Battlefield devs (Refraction Games)?
- Leaving cake's dry ingredients together for later quicker preparation?
- Why would I want to lower the stall speed?
- Is reincarnation inevitable?
- Is co-authoring with friends a good idea?
- How can I figure out source of reflections causing glare?
- Combinatorial Pipes
- Techniques for hiding dice rolls when an NPC/enemy has advantage/disadvantage
