Questions tagged [istio]

Use this tag if a question is about Istio, which can be used to connect, secure, control, and observe services.

Filter by
Sorted by
Tagged with
0
votes
0answers
31 views

How do I install Istio 1.8 using Helm with custom profile?

I am looking at the documentation to install Istio using helm: https://istio.io/latest/docs/setup/install/helm/ I want to use a custom profile that I have a yaml for. However, on that page I do not ...
1
vote
1answer
52 views

TLS handshake failure

We have an ODBC Driver trying to connect through TLS , but fails. We tested using openssl with the following command and worked fine: openssl s_client -connect xxx.com:31020 the server accepts TLS 1....
0
votes
1answer
20 views

Istio Virtual service - enforce specific api version

I am having troubles creating an object within specific api group it gets switced from alpha to beta, why? networking.istio.io/v1beta1 vs networking.istio.io/v1alpha3 Note: I can control in the crd ...
2
votes
0answers
208 views

Istio - corsPolicy allowOrigin from virtualService not blocking curl requests from different origins

Bug description 1.2.2/1.2.10/1.4.0/1.5.1/1.5.2/1.5.3/1.5.4/1.6.0 - allowOrigins not blocking curl requests from different origins. Security vulnerability scan has detected this. When I curl if a ...
1
vote
1answer
12 views

Istio: envoy proxy to https container in same pod

I've got a container that runs a https service on port 9999. The service is as follows: apiVersion: v1 kind: Service metadata: labels: role: pingfederate2 name: pingfederate2 spec: ports: ...
-1
votes
1answer
861 views

upstream connect error or disconnect/reset before headers. reset reason: connection failure

I am deploying a virtual service and gateway but when I run it on browser get the below error: upstream connect error or disconnect/reset before headers. reset reason: connection failure I deployed ...
0
votes
1answer
202 views

Replace/Consume Istio's Prometheus/Grafana by existing Prometheus-operator

I have multiple K8S clusters that have Prometheus-operator Helm chart installed in monitoring namespace. Each operator consists of Prometheus/Alertmanager/Grafana. Aside from it I have Istio Helm ...
0
votes
1answer
49 views

How to scale the control plane of a service mesh?

Scalability in the data plane is easy to achieve by simply having more replicas. The configuration the proxies receive from the control plane makes that possible . However, if the number of services (...
7
votes
5answers
49k views

How to solve 'upstream connect error or disconnect/reset before headers. reset reason: connection termination' in Istio?

I try to setup an aws load balancer (ELB) with SSL follow the instruction at #6566 Certificate was attached on ELB. However, I got the issue "upstream connect error or disconnect/reset before ...
2
votes
0answers
82 views

What security loopholes does Istio tackle?

My application consists of four microservices. (hr, salary, stock and employee). Users of the application access the "hr" service using http. To fulfill this request the hr microservice communicates ...
0
votes
1answer
115 views

Kubernetes - Internal only API Endpoints

Hypothetical question. Say we have a Java application running in a Kubernetes pod (single docker container) that has 'public' endpoints and 'internal' endpoints. The /public endpoints should be ...