I have a gRPC server running on k8s cluster (remote server). I try to connect to this service from gRPC client (local pc). To do so, I use Istio ingress gateway. But I get "connection closed" msg with 14 error code.
Here is my gRPC client:
conn, err := grpc.Dial("service.example.com:80", grpc.WithInsecure())
if err != nil {
panic(err)
}
c := service.NewServiceClient(conn)
if _, err := c.TestRPC(...); err != nil {
log.Println(err.Error()) // rpc error: code = Unavailable desc = connection closed
}
My Gateway:
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
name: gateway
spec:
selector:
istio: ingressgateway
servers:
- port:
number: 80
name: grpc
protocol: GRPC
hosts:
- "*"
My VirtualService:
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: service-vs
spec:
gateways:
- gateway
hosts:
- "service.example.com"
http:
- match:
- port: 80
route:
- destination:
host: service
port:
number: 9000
My Service:
apiVersion: v1
kind: Service
metadata:
name: service
labels:
app: service
spec:
ports:
- port: 9000
name: grpc
selector:
app: service
My Deployment:
apiVersion: apps/v1
kind: Deployment
metadata:
name: service
labels:
app: service
spec:
replicas: 1
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 1
maxUnavailable: 25%
selector:
matchLabels:
app: service
template:
metadata:
labels:
app: service
spec:
containers:
- name: service
image: registry.example.com/user/service:latest
imagePullPolicy: Always
ports:
- name: grpc
containerPort: 9000
imagePullSecrets:
- name: private-registry-secret
How can I solve this problem?
p.s.
- My example.com is under CloudFlare.
- I have set DNA A record for service.example.com
- There are no firewall rules.
- gRPC connection is on (I think it is not important as it only work for 443 port)
