Stack Overflow
Stack Overflow

Questions tagged [istio-sidecar]

196 questions
0
votes
1 answer

Istio jwt parse and populate in request header

I have a couple of microservices and using istio. And want end user roles details in each micro services due to some business requirement. I want to know how to populate claims (end user roles) (jwt) in a request header. I've configure below istio…
Ram
  • 37
  • 4
0
votes
0 answers

Will a sidecar scale on a K8s Deployment?

Has anyone practical experience with this scenario? Given an increase in load and concurrency for a service, will the sidecars scale as well? Can the limits be defined?
ximbal
  • 3,178
  • 2
  • 17
  • 19
0
votes
1 answer

Istio Version - Template_Version_And_Istio_Version_Mismatched

We are facing issue w.r.t Istio running on the K8s Cluster and see the below error in the “Istio-sidecar-injector” pod. Current Istio Version used is 1.3.8 Failed to parse template: template: inject:1: function…
JIJIL
  • 1
0
votes
1 answer

Scrape App metrics using Prometheus with Envoy side car proxy

I am using GKE for my workloads. I have installed Istio 1.11.0 on my cluster. I have also have installed Prometheus in istio-system namespace using this link. I have a Python application deployed in the prom-test namespace, which is collecting…
Sunil
  • 553
  • 1
  • 12
  • 30
0
votes
1 answer

Istio-check another host before routing

I want to configure istio gateways virtual service to check "auth-service" host before routing request to some hosts. Is there any option to configure this?
Ramil
  • 1
  • 1
0
votes
1 answer

Istio: Unable to mount secrets to the pod

I'm a noob with Istio and K8s so sorry if this question sounds a little dumb. I'm trying to provide my own certs to the Gateway deployment for which I created secrets like below. $ kubectl create -n istio-system secret tls certs --key…
Shriram Sharma
  • 599
  • 1
  • 5
  • 19
0
votes
1 answer

Extract information from client certificate using ISTIO

I plan to use ISTIO to implement the service mesh and use mTLS between the services. Some services require some information about the client like CN from it's client certificate. How can I configure ISTIO to extract the CN from client certificate…
Jerald Baker
  • 1,121
  • 1
  • 12
  • 48
0
votes
1 answer

Configure traffic to external HTTPS proxy (Squid) by the domain name of a Kubernetes service

I've followed the entire subject of Using an External HTTPS Proxy that pointed out that it's a VIP based example not k8s service approach. But in my case Squid is accessible via k8s service and I would like to use FQDN not VIP address. I've changed…
Maciek Leks
  • 1,288
  • 11
  • 21
0
votes
1 answer

How to rollback Istio to the old control plane, instead of completing the canary upgrade?

We were doing a test on Canary upgrade of our Istio setup from 1.7.3 to 1.8.6 version. So we installed canary version 1-8-6 for the istio controlplane and we mapped one namespace to the upgraded version. We tested the application and we were getting…
Vowneee
  • 956
  • 10
  • 33
0
votes
2 answers

Remove Reported Metrics of Istio Sidecar

I use Istio 1.8 for service mesh and Prometheus to collect metrics from sidecards. Currently these metrics are been provided by sidecards: istio_request_bytes_bucket istio_request_duration_milliseconds_bucket istio_requests_total …
P.Ezzati
  • 178
  • 1
  • 8
0
votes
1 answer

Trying to Access OpenFaaS with an Istio Gateway

I was trying to access OpenFaaS through istio in which I have included gateway and virtual service. I need to create a separate endpoint for the OpenFaaS eg.: "http://istio_ingress_Loadbalancer/openfaas" - This should give me OpenFaaS UI. Can anyone…
Manjeet Tanwar
  • 1
  • 1
0
votes
1 answer

Pod not started after sidecar injection manually using istio

I am getting below error while trying to inject istio sidecar container manually to pod. Kubernetes version v1.21.0 Istio version : 1.8.0 Installation commands:- kubectl create namespace istio-system helm install --namespace istio-system…
nja
  • 67
  • 2
  • 13
0
votes
0 answers

Istio. How to add Virtual Host to Envoy?

Using Istio EnvoyFilter https://istio.io/latest/docs/reference/config/networking/envoy-filter/ I want to add new VirtualHost inside Envoy in sidecar of pods. How to do this? I guess I should create and apply manifest something like: apiVersion:…
EvideShow
  • 39
  • 4
0
votes
0 answers

upstream connect error or disconnect/reset before headers. reset reason: connection failure

I'm facing this issue upstream connect error or disconnect/reset before headers. reset reason: connection failure here the my deployment and service file apiVersion: v1 kind: Service metadata: name: project labels: app: project service:…
Mehmood ulhassan
  • 1
  • 1
0
votes
0 answers

Getting "upstream connect errors" when browsing my Grafana deployment on K8s/Istio

I'm using Grafana v7.3.3 connected to a PostgreSQL. I have it running in a Kubernetes environment using Istio, deployed via ArgoCD. Everything will work fine with the site about 50% of the time, but the other 50% of the timeit will have the…
Mike K.
  • 543
  • 3
  • 14
  • 46
1 2 3
…
12
13