Stack Overflow
Stack Overflow

Questions tagged [istio]

Istio is an open-source platform for managing and securing microservices

Istio is an open platform that provides a uniform way to connect, manage, and secure microservices. Istio supports managing traffic flows between microservices, enforcing access policies, and aggregating telemetry data, all without requiring changes to the microservice code. Istio gives you:

  • Automatic load balancing for HTTP, gRPC, and TCP traffic.
  • Fine-grained control of traffic behavior with rich routing rules, retries, failovers, and fault injection.
  • A pluggable policy layer and configuration API supporting access controls, rate limits and quotas.
  • Automatic metrics, logs, and traces for all traffic within a cluster, including cluster ingress and egress.
  • Secure service-to-service authentication with strong identity assertions between services in a cluster.

enter image description here

Getting Started

Books

2612 questions
11
votes
1 answer

Accessing service using istio ingress gives 503 error when mTLS is enabled

I have a mutual TLS enabled Istio mesh. My setup is as follows A service running inside a pod (Service container + envoy) An envoy gateway which stays in front of the above service. An Istio Gateway and Virtual Service attached to this. It routes…
Pasan W.
  • 674
  • 2
  • 10
  • 23
11
votes
2 answers

Istio Distributed Tracing shows just 1 span

I'm following this guide, with Zipkin. I have 3 microservices involed, A -> B -> C, I'm propagating headers from A to B and from B to C. But in the Zipkin dashboard I only see entries for A -> B and B -> C, not A -> B -> C. Those are the headers: [ …
andrew
  • 3,879
  • 4
  • 25
  • 43
10
votes
2 answers

istio-proxy closing long running TCP connection after 1 hour

TL;DR: How can we configure istio sidecar injection/istio-proxy/envoy-proxy/istio egressgateway to allow long living (>3 hours), possibly idle, TCP connections? Some details: We're trying to perform a database migration to PostgreSQL which is being…
Yayotrón
  • 1,759
  • 16
  • 27
10
votes
3 answers

How to set AWS ALB instead of ELB in Istio?

I am trying to setup ALB load balancer instead of default ELB loadbalancer in Kubernetes AWS.The loadbalancer has to be connected to the istio ingressgateway.I looked for solutions and only found one. But the istio version mentioned is V1 and there…
sachin
  • 1,220
  • 1
  • 14
  • 24
10
votes
5 answers

How to create custom istio ingress gateway controller?

Our GKE cluster is shared to multiple teams in company. Each team can have different public domain (and hence want to have different CA cert setup and also different ingress gateway controller). How to do that in Istio? All the tutorial/introduction…
Agung Pratama
  • 3,666
  • 7
  • 36
  • 77
9
votes
6 answers

Setting up on ISTIO on EKS cluster using Terraform or Helm

I'm new to Terraform and Helm world! I need to set up Istio on the AWS EKS cluster. I was able to set up the EKS cluster using Terraform. I'm thinking of installing ISTIO on top of the EKS cluster using Terraform by writing terraform modules.…
Sweta Sharma
  • 2,404
  • 4
  • 21
  • 36
9
votes
1 answer

Debugging istio rate limiting handler

I'm trying to apply rate limiting on some of our internal services (inside the mesh). I used the example from the docs and generated redis rate limiting configurations that include a (redis) handler, quota instance, quota spec, quota spec binding…
Reut Sharabani
  • 30,449
  • 6
  • 70
  • 88
9
votes
1 answer

How to fix 'container runtime is down,PLEG is not healthy'

I have aks with one kubernetes cluster having 2 nodes. Each node has about 6-7 pod running with 2 containers for each pod. One container is my docker image and the other is created by istio for its service mesh. But after about 10 hours the nodes…
Ask
  • 91
  • 1
  • 1
  • 2
9
votes
1 answer

Istio and (or versus) Nginx Ingress Controller

I'am on a journey of testing Istio and at the moment I'am about to test the "canary" capabilities of routing traffic. For my test, I created a small servicemesh composed of 5 microservices (serviceA, serviceB, serviceC, serviceD, serviceE). Each one…
Fred Mériot
  • 4,157
  • 9
  • 33
  • 50
8
votes
0 answers

Jaeger in Istio is not tracing more than 2 spans (services in nodejs)

I have 3 services A, B and C. I have written APIs which call A -> B -> C. I have installed Jaeger as given in the official documentation of Istio (https://istio.io/latest/docs/tasks/observability/distributed-tracing/jaeger/). My Jaeger dashboard is…
Bhavesh
  • 237
  • 3
  • 16
8
votes
1 answer

Install Istio on EKS cluster using Terraform and Helm

I'm new to Terraform and Helm world! I need to set up Istio on the AWS EKS cluster. I'm trying to install Istio on top of EKS cluster using Terraform and Helm as a provider: Below is the terraform code for the same: resource "kubernetes_namespace"…
Sweta Sharma
  • 2,404
  • 4
  • 21
  • 36
8
votes
2 answers

Random “upstream connect error or disconnect/reset before headers” between services with Istio 1.3

So, this problem is happening randomly (it seems) and between different services. For example we have a service A which needs to talk to service B, and some times we get this error, but after a while, the error goes away. And this error doesn't…
codiaf
  • 569
  • 2
  • 18
  • 47
8
votes
2 answers

K8S - using Prometheus to monitor another prometheus instance in secure way

I've installed Prometheus operator 0.34 (which works as expected) on cluster A (main prom) Now I want to use the federation option,I mean collect metrics from other Prometheus which is located on other K8S cluster B Secnario: have in cluster A…
Rayn D
  • 579
  • 1
  • 13
  • 29
8
votes
1 answer

standard ingress for certificate management combined with istio

Currently Istio does not support a fully automated certificate procedure. The standard ingress does support this by means of cert-manager. Would it be possible to combine standard ingress configuration for certification management with istio for…
musicformellons
  • 12,283
  • 4
  • 51
  • 86
8
votes
1 answer

How log request and response body in Istio

I'd like to log request and response body from incoming traffic to each my microservice. Is it possible in Istio (Envoy) out-of-the-box? I don't see body attribute for mapping in Mixer's EntryLog. Maybe it will be added in future version of…
montana202
  • 81
  • 1
  • 4
1
2
3
…
99 100