2023年7月10日 · This makes sense, since Istio is terminating the TLS connection and using HTTP to forward the request to the external service. Using a "tls" match type (for external …

Cleaning up Istio is a bit tricky, because of all the things it adds: CustomResourceDefinitions, ConfigMaps, MutatingWebhookConfigurations, etc. Just deleting the istio-system namespace …

2019年9月13日 · You can get the logs of the istio-ingressgateway pod by running the following command: $ kubectl -n istio-system logs $ (kubectl -n istio-system get pods …

I have an Istio 1.4.6 VirtualService with a match and a url rewrite defined as follows: match: - authority: prefix: example.com uri: prefix: /foo/bar rewrite: ...

2017年6月26日 · istio: ingressgateway This refers to a pod in the 'istio-system' namespace that is usually installed by default called 'istio-ingressgateway' - and this pod is exposed by a service …

2022年5月17日 · I would like to know whether wss is not supported after using Istio as the entry point? According to my test, it seems that wss really can't run on istio, but ws is normal, …

2018年12月17日 · I'd like to log request and response body from incoming traffic to each my microservice. Is it possible in Istio (Envoy) out-of-the-box? I don't see body attribute for …

2019年7月4日 · When pod with an istio side car is started, the follwing things happen an init container changes the iptables rules so that all the outgoing tcp traffic is routed to the sidecar …

2023年1月16日 · i have a minor problem with Istio and the EnvoyProxy: NR filter_chain_not_found The socket client and the socket server run within the same cluster …

2022年1月4日 · If you are bringing your own certificate instead of istio's own self signed cert, you have to name the secret file name as cacert. For your second questions, the cacert secret is …