Stack Overflow
Stack Overflow

Questions tagged [istio-sidecar]

196 questions
1
vote
1 answer

Envoy proxy usage without Istio

I am researching the use of Istio service mesh and finding the Envoy proxy is a very good service proxy option to work with it. But over last couple of years, the Envoy proxy seems to have grown as a cloud-native project. In our application, we need…
Robin Bajaj
  • 2,002
  • 4
  • 29
  • 47
1
vote
0 answers

Istio EnvoyProxy Access Logs - how to log external HTTPS calls?

I have ISTIO service mesh configured in my AKS (Azure Kubernetes Service) cluster. I am able to see the access logs of requests my services makes to other services within the AKS cluster. However, When my service makes a call to external services,…
Jerald Baker
  • 1,121
  • 1
  • 12
  • 48
1
vote
0 answers

Istio Sidecar - doc description vs. live cluster behavior

my question is related to the Istio Sidecar First : In the description of the Sidecar the following is stated: When determining the Sidecar configuration to be applied to a workload instance, preference will be given to the resource with…
Sh.F
  • 11
  • 3
1
vote
1 answer

Istio controller is still active after I purged it from my cluster

I have a test k8s environment, my test NS has the istio-injection=true label. I have Istio installed. My app and istio injection work fine. After a while, I needed to delete Istio, so I did istioctl x uninstall --purge It was reported as successful.…
David S.
  • 10,578
  • 12
  • 62
  • 104
1
vote
1 answer

Istio EnvoyFilter Lua HTTP Filter - How to get request URI from request_handle?

I know that 2 Lua functions are called in a filter when a call is made : function envoy_on_request(request_handle) end function envoy_on_response(response_handle) end How can I retrieve the Request URI Path/query params from the…
Jerald Baker
  • 1,121
  • 1
  • 12
  • 48
1
vote
0 answers

How to disable Istio request log communication between services on GKE?

I've just set up a GKE Cluster with Anthos service mesh enabled. I've noticed that every communication between services is registered on GCP's log ingestion system as I see them in Logs Dashboard. Something like this: I couldn't find anywhere how…
Mauricio
  • 2,552
  • 2
  • 29
  • 43
1
vote
0 answers

Debugging istio sidecar injection

I've installed istio on an EKS cluster. What started happening is that for some mysterious reason, istio stops executing sidecar injection on new pods. I've verified that the namespaces have been properly labels, and that the pods do not have…
Jason Hirata
  • 59
  • 3
1
vote
2 answers

Istio Pods Not Coming Up

I have Installed Istio-1.8.3 via Rancher UI long back and Istio Pods and Ingress Gateway Pods are Up and Running and My Application is getting served by Istio. Now, Recently We have Upgraded the K8's Cluster version from 1.21 to 1.22 and then 1.22…
RajNikhil Marpu
  • 397
  • 2
  • 4
  • 19
1
vote
0 answers

Can I make Istio 1.4.10 local rate limit?

I'm working on istio 1.4.10, I need local rate limit replace nginx rate limit. Istio 1.4.10 explain just grobal rate limit via redis. but recent doc explain local rate limit with envoy. So Can i make custom local rate limit envoyFilter ?
reperion
  • 129
  • 9
1
vote
0 answers

I can't see istio's traffic in Envoy outbound port 15001 or Envoy inbound port 15006

After deploy the sample application,I want to see the life of a Packet in ISTIO According to this article. After I execute the below command, I get nothing. tcpdump -i calib5d7dbd52bc port 15006 -A The calib5d7dbd52bc is a veth pair of the pod…
Toni.W
  • 113
  • 1
  • 2
  • 12
1
vote
0 answers

Disable Istio default retry on errorcode 503

I am not sure, whether we are talking about the smae issue. I will try to explain the scenario which I am trying. I have 2 services appservice-A and appservice-B, both are in the same namespace "mynamespace" and both have seperate Virtual service…
Vowneee
  • 956
  • 10
  • 33
1
vote
1 answer

k8s: health check fails via kubelet, but works via curl from worker where kubelet runs

Currently, I am facing an issue with my application: it does not become healthy due to the kubelet not being able to perform a successful health check. From pod describe: Warning Unhealthy 84s kubelet Startup probe…
opstalj
  • 892
  • 4
  • 13
  • 22
1
vote
0 answers

INSERT_FIRST in an Envoy filter

I have a cluster in which several filters are applied and I want to make sure that one of them is the first one to run. For now this filter has this definition: patch: operation: INSERT_BEFORE value: name: filterName …
CodeMonkey
  • 11,196
  • 30
  • 112
  • 203
1
vote
1 answer

How to disable istio retry

We are using Istio 1.11.2 and facing some issue with Istio retry. In order to disable the automatic retry, we added the following block in object in the http list. However, Istio still retries requests. apiVersion: networking.istio.io/v1beta1 kind:…
Vowneee
  • 956
  • 10
  • 33
1
vote
1 answer

Istio Strict mode giving connection reset by peer error

Turning the mtls mode to Strict in Istio is giving error : msg="Error performing http GET at http://172.xx.xx.xx:xxxx read: connection reset by peer" But turning the mtls mode to Permissive works fine. Is there any solution so that the error can be…
kr_devops
  • 117
  • 3
  • 14
1 2 3
…
12 13