Stack Overflow
Stack Overflow

Questions tagged [istio]

Istio is an open-source platform for managing and securing microservices

Istio is an open platform that provides a uniform way to connect, manage, and secure microservices. Istio supports managing traffic flows between microservices, enforcing access policies, and aggregating telemetry data, all without requiring changes to the microservice code. Istio gives you:

  • Automatic load balancing for HTTP, gRPC, and TCP traffic.
  • Fine-grained control of traffic behavior with rich routing rules, retries, failovers, and fault injection.
  • A pluggable policy layer and configuration API supporting access controls, rate limits and quotas.
  • Automatic metrics, logs, and traces for all traffic within a cluster, including cluster ingress and egress.
  • Secure service-to-service authentication with strong identity assertions between services in a cluster.

enter image description here

Getting Started

Books

2612 questions
0
votes
0 answers

Istio canary release issue

I am having an issue with Istio traffic routing. I want to test canary release with Istio .I´ve created a microk8s cluster, installed istio and injected it to default namespace. I´ve also deployed book-info aplication (…
Michal Owczarzy
  • 1
0
votes
1 answer

istio virtual service host cannot be resolved from inside pod

Using istio, I want to create a virtual service to serve a virtual domain/host inside the cluster. So pods inside the cluster can request "http://internal.service.com/path" to reach certain destination services. One way is to use make all…
N.Xu
  • 131
  • 1
  • 7
0
votes
2 answers

How import grafana dashboard for Istio?

I use grafana helm chart and configmap for importing dashboards, but when I try to load the official Istio dashboard, I get: logger=provisioning.dashboard type=file name=sidecarProvider t=2023-04-13T12:28:39.524808833Z level=error msg="failed to…
batazor
  • 852
  • 2
  • 16
  • 36
0
votes
0 answers

Install istio on aks using azure devops pipeline

I’m trying to install istio on aks using azure devops pipeline but not able to get yaml file and also not able to create using istioctl. I’m able to download the istio using curl but not able to set env variable on agent host and not able to use…
Manish Kumar
  • 1
0
votes
1 answer

Apache ActiveMQ Artemis HA cluster deployment in Kubernetes with the Istio proxy injected into Artemis pods logs lot of the connection failure errors

Apache ActiveMQ Artemis cluster in Kubernetes environment with the Istio proxy injected into the Artemis pods logs lot of errors showing connection loss between master(active) and slave (backup) instances. We also experience intermittent connection…
MYC
  • 3
  • 3
0
votes
0 answers

istio re-starts the container if my response time is low

i have a kubenates cluster and I have setup istio and there's one service basically this service is an rest API, i have some endpoints exposed though an lb the issue is basically my other endpoints works find and everything is good but there's one…
dasith
  • 11
  • 2
0
votes
0 answers

ISTIO VirtualService Destination HTTPS TLS problem

I would like my VirtualService to redirect to an HTTPS "Service". For this, I used a DestinationRule specifying a trafficPolicy and the caCertificates. The CA has been successfully placed in the Envoy proxy, which I have manually verified. However,…
OniHanzo
  • 1
  • 1
0
votes
0 answers

How to setup Istio on IBM Kubernetes cluster? How to create the gateway?

I was trying to configure Istio inside IBM Kubernetes cluster where Hyperledger fabric is running. Injected Side car chairs and showing the list for running pods also. But dont know how to proceed to view the traffic from other pods and to create…
girish mp
  • 1
0
votes
0 answers

istio - sidecar initialization delay causing health checks failure

I am seeing quite a bit of a lag in sidecar startup. istio-proxy version 1.9.1 wondering if readiness.status.sidecar.istio.io/initialDelaySeconds: '25' I added as a pod annotation is contributing to this ? Notice between citadelclient and "marking…
bhantol
  • 9,368
  • 7
  • 44
  • 81
0
votes
0 answers

Is it possible to implement session affinity for pod to pod communication in a Kube cluster?

I have a requirement where I need to implement session affinity. We have currently configured istio with service mesh on our kube clusters. There is a sidecar running with each pod in the service mesh. We have found a way to redirect external…
Vaibhav
  • 507
  • 2
  • 4
  • 20
0
votes
2 answers

nginx istio url not resolved and return 426 status code

i have a service that name is image-api. the image-api is accessible in pod but nginx return 426 status code after running this command return the expected data curl image-api.gateways.svc.cluster.local:8000 but nginx return 426 status code. if…
Arman
  • 367
  • 3
  • 12
0
votes
1 answer

Istio AuthorizationPolicy `to` rule matching nothing and returning 503

This auth policy should allow all routes: apiVersion: security.istio.io/v1beta1 kind: AuthorizationPolicy metadata: name: allow-all namespace: qcust spec: action: ALLOW rules: - to: - operation: paths: -…
bks71
  • 1
  • 1
0
votes
0 answers

ERR_SSL_PROTOCOL_ERROR while launching app on localhost in Chrome

I am trying to launch my app on localhost using Chrome browser, but I keep getting an "ERR_SSL_PROTOCOL_ERROR". The app works fine on curl. Can anyone suggest any possible solutions for this issue? About the application: "Bookinfo" is a sample…
Swapnil91color
  • 11
  • 1
0
votes
0 answers

Istio `AuthorizationPolicy` without Envoy proxy

I've currently deployed a small application which consists of multiple pods as well as a k8s service to connect to it. Due to some limitations of the service, it's not possible to inject the istio sidecar. At the moment, I've configured ingress via…
BStadlbauer
  • 1,287
  • 6
  • 18
0
votes
0 answers

OAuth2-Proxy crash when connect to keycloak

I don't have too much experience with kubernetes and now I'm facing some issues. I want to authenticate an app in Kubernetes using Istio Ingress gateway, OAuth2-Proxy and keycloak. The app that I want to authenticate is PgAdmin. To make this I…
Nicolas
  • 55
  • 4
1 2 3
…
99
100