Questions tagged [istio]
29 questions
0
votes
0 answers
resource.labels.containerName: sidecar-injector-webhook Error: failed to start patch cert loop the server could not find the requested resource
After updating GKE to version 1.23.1400 it started showing the error resource.labels.containerName: sidecar-injector-webhook Error: failed to start patch cert loop the server could not find the requested resource
0
votes
1 answer
Istio ingress gateway cannot connect to more than one replica for a service
I'm setting up Istio in a new AWS EKS cluster and created a basic nginx deployment to test. When the deployment only has one replica, it works perfectly, responding in less than 100ms.
When I add one replica, the new pod's response time goes up like…
kenske
- 121
- 3
0
votes
1 answer
Issues Setting Up Istio Gateway
I have an AKS cluster with 2 nodes
Node A. 10.216.6.229 Node B. 10.216.6.230
We do not have External Load Balancer, so Istio Gateway EXTERNAL-IP is . As per Get Started documentation, I used command below to get INGRESS-HOST, which was set to Node A…
Dmitriy
- 1
- 1
0
votes
1 answer
Istio - Prometheus - HPA Stack not communicating [ HPA could not calculate the number of replicas ]
I have cluster with 1 control panel and 2 nodes.
Istio is installed as Service Mesh.
I do request management via istio ingress.
I want it to automatically scale by sharing metrics between Kubernetes HPA and istio prometheus, but I couldn't.
My pods…
Orgenus
- 1
- 2
0
votes
0 answers
coreDNS flooded by istio (envoy)
When there are lots of external VMs which are accessible only via a firewall and there are multiple namespaces in the cluster, each with its own set of external VMs, you end up with a lot of ServiceEntries, which in turn cause a lot of DNS queries…
bofh.at
- 101
0
votes
1 answer
istio gateway Not launching internal links, how to fix that?
I have deployed application in kubernetes.
It is working if we expose to a default load balancer service in azure kubernetes.
But, after setting a virtual service linked with istio ingress gateway, it is launching only the home page, none of the…
uday
- 352
- 10
- 30
0
votes
2 answers
How to route all traffic to a service in Istio?
I have a virtual service yaml file with below lines.
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: nodeserver
spec:
hosts:
- "*"
gateways:
- node-gateway
http:
- match:
- uri:
exact: /
-…
uday
- 352
- 10
- 30
0
votes
1 answer
istioctl kiali is not creating, how to fix that?
From the getting started link, I was able to create a gateway and the routing to bookinfo app provided in sample.
It got deployed and able to access the app from ingress gateway of istio.
The next step, deployed kiali using the addons.
kubectl apply…
uday
- 352
- 10
- 30
0
votes
1 answer
Istio Multi-master Multi-network Locality Failover Woes
I can't get "multi-primary multi-network" to play nice with locality failover (or locality load balancing for that matter). The endpoints are registered fine. The istio-system is labeled with network information, and each node is labeled with zone…
pnovotnak
- 260
- 4
- 11
0
votes
0 answers
Openshift Route - Cookie specification - Istio Routing
I have requirement to pass cookie or headers in openshift route to istio virtual service and decide the traffic routing based on cookie or header passed from route to virtualservice.
Please share pointers on the same.
Nagendra Vummadi
- 101
0
votes
1 answer
Canary with istio, what happen if app backend service is down/slow
App A is a Php application, service B is elasticsearch.
A is deployed via istio, with canary pattern.
A'canary and A'current use the same B service.
If B is getting slow or down, A'canary and A'current will throw same errors, what happen at this…
Thomas Decaux
- 1,289
- 12
- 13
0
votes
0 answers
Can a local proxy 'improve' network reliability?
Apologies for the fairly vague question but I have been working with Envoy as part of Istio recently and was wondering about one of the benefits of sidecar proxies in general
By configuring a proxy locally (as Istio does) in the same network…
dippynark
- 233
- 3
- 13
0
votes
1 answer
istio service mesh for east-west traffic management in kubernetes cluster
I am having the confusion regarding the some of use-case in our environment. First one is we will be having api gateway of our own for north/south traffic which our api gateway will be listening to the request from outer world. So we are planning to…
Susanta Gautam
- 5
- 1
- 5
0
votes
1 answer
Envoy/Istio as reverse-proxy to explicit IP
I'd like to route like this (nginx pseudo-config):
server_name fou.example.com;
location "/Forskning" {
upstream https://185.102.32.26/;
}
location "/" {
upstream http://fou-web.fou.svc.cluster.local;
}
How do I do this with VirtualService,…
Henrik
- 386
- 2
- 4
- 13