Discuss.istio.io

Service health check exposed for AWS NLB

WEBNetworking. jtnz September 18, 2020, 4:25am 1. Hi, We’re investigating using Istio on AWS EKS and have a question regarding exposing the health of a service exposed outside of …

Actived: 2 days ago

URL: https://discuss.istio.io/t/service-health-check-exposed-for-aws-nlb/8338

Degraded performance and failing health checks

WEBHi everyone, A bit of a weird bug I am experiencing with istio (1.7) on a gke (1.17) cluster. If I allow istio to rewrite my HTTP probes, I get loads of connectivity errors …

Category:  Health Go Health

Istio healthz/ready endpoint not responding correctly, leading to

WEBThere are a few solutions that do this. ive used this in the past https://github.com/monzo/envoy-preflight

Category:  Health Go Health

Health check with http/2

WEBHello everyone, I have a microservice that runs over http/2, my environment is configured with istio and mtls, I am trying to add health checks for the microservice …

Category:  Health Go Health

How ISTIO_KUBE_APP_PROBERS env variable works

WEBHi Team, I’m running Istio version 1.8. There is a slight confusion here with Health-check implementation (readiness probes) of pods with istio-proxy injected. My …

Category:  Health Go Health

Can SSL be enabled for port 15021

WEBAccording to Istio / Application Requirements, port 15021 is reserved for sidecar health checks. The protocol is listed as HTTP in the table in the above link and …

Category:  Health Go Health

HTTPS Healthcheck Fails on GKE

WEBI’ve confirmed firewall rules are in place to allow GCP health checks for all TCP ports. I’ve even used tcpdump and netstat to confirm connectivity is available on …

Category:  Health Go Health

How to block URLs with specific resource on istio

WEBIt seems better for using authorization policy for access control. By default the authorization policy returns 403 RBAC access denied message, you can customize it …

Category:  Health Go Health

Azure and the Application Gateway

WEBYes, aks now requires that the health probes must match the hostnames of the certificates, so once we fixed the probes the backend internal load balancer started …

Category:  Health Go Health

Intermittently "no healthy upstream" being returned when service …

WEBHi Team we are having Kubernetes cluster version 1.23.8 and Istio version 1.14.5 Some time after the application deployment application gives 503 “no healthy …

Category:  Health Go Health

Removing status-port from exposed ports of a ingressgateway …

WEBHi. When setting up Istio with an ingress-gateway load balancer it tries to expose several ports. Additionally to my desired 80 and 433 there is also 15021 “status …

Category:  Health Go Health

Remove or Hide "server" response header on health check port …

WEBI am able to remove the server response header on ports 80 and 443 using below EnvoyFilter. apiVersion: networking.istio.io/v1alpha3 kind: EnvoyFilter metadata: …

Category:  Health Go Health

Health check probes fail against http2 only service (with strict mTLS)

WEBChanging the mTLS to permissive mode works just fine (w/o the annotation) Tested the same approach on the another service (not http2 only) and the probes work …

Category:  Health Go Health

HTTP 404 When "AUTHORITY" and "REQUESTED_SERVER_NAME" …

WEBThis is what is I see in “istio-ingressgateway” pod’s log. It looks like the handshake happens on host SNI “ sandpit.abc.com ” and Authority is being passed as “ …

Category:  Health Go Health

HTTPS for ALB ingress gateway and Istio ingress gateway

WEBNetworking. wreeder July 8, 2019, 10:24pm 1. I can successfully setup an AWS ALB ingress gateway with HTTPS inbound terminating at the ALB, and use HTTP from the …

Category:  Health Go Health

Quitquitquit endpoint for istio 1.6.8

WEBQuitquitquit endpoint for istio 1.6.8. maheshmr December 14, 2020, 7:54am 1. In case of applications running as jobs, cronjobs etc with istio-sidecar injected in the …

Category:  Health Go Health

Istio Give 503 error with no healthy upstream when pods get evicted

WEBHi Framled, I didn’t have the fix from istio but I can help you with the work around I did. When issue occurs, recreate virtualservice for the application.

Category:  Health Go Health