istio.io | Source for the istio.io site | Service Mesh library

by istio HTML Version: Current License: Apache-2.0

X-Ray Key Features Code Snippets Community Discussions(10)Vulnerabilities Install Support

kandi X-RAY | istio.io Summary

istio.io is a HTML library typically used in Architecture, Service Mesh applications. istio.io has no bugs, it has no vulnerabilities, it has a Permissive License and it has medium support. You can download it from GitHub.

This repository contains the source code for istio.io and preliminary.istio.io. Please see the main Istio README file to learn about the overall Istio project and how to get in touch with us. To learn how you can contribute to any of the Istio components, please see the Istio contribution guidelines.

Support

Quality

Security

License

Reuse

Support

istio.io has a medium active ecosystem.

It has 702 star(s) with 1387 fork(s). There are 114 watchers for this library.

It had no major release in the last 6 months.

There are 274 open issues and 1617 have been closed. On average issues are closed in 154 days. There are 45 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of istio.io is current.

Quality

istio.io has no bugs reported.

Security

istio.io has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

istio.io is licensed under the Apache-2.0 License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

istio.io releases are not available. You will need to build from source code and install.

Installation instructions are not available. Examples and code snippets are available.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of istio.io

Get all kandi verified functions for this library.

istio.io Key Features

No Key Features are available at this moment for istio.io.

istio.io Examples and Code Snippets

No Code Snippets are available at this moment for istio.io.

Community Discussions

Trending Discussions on istio.io

Unable to log egress traffic HTTP requests with the istio-proxy

What does istioctl x command refers to?

Istio and the custom HTTP method

Able to access Elasticsearch with Python's Requests but not with official client

How to restrict pod egress traffic only to external

Istio Virtualservice creation access denied

How to use Istio Service Entry object to connect two services in different namespace?

How to debug an EnvoyFilter in Istio?

'Duplicate entries for key' error when creating an Istio IngrressGateway on EKS

"pilot.validation.istio.io" fails on GKE

QUESTION

Unable to log egress traffic HTTP requests with the istio-proxy

Asked 2022-Feb-11 at 10:45

I am following this guide.

Ingress requests are getting logged. Egress traffic control is working as expected, except I am unable to log egress HTTP requests. What is missing?

...

ANSWER

Answered 2022-Feb-07 at 17:14

AFAIK istio collects only ingress HTTP logs by default.

In the istio documentation there is an old article (from 2018) describing how to enable egress traffic HTTP logs.

Please keep in mind that some of the information may be outdated, however I believe this is the part that you are missing.

Source https://stackoverflow.com/questions/71018977

QUESTION

What does istioctl x command refers to?

Asked 2022-Jan-05 at 08:02

I see in the official documentation references to commands starting with istioctl x ... but there is not official definition for the usage of x.

As far as I can infer from the istioctl manual, it appears to be a shorthand for experimental.

The command istioctl | grep x does not show any reference to the x usage neither.

...

ANSWER

Answered 2022-Jan-05 at 08:02

You are correct - x is shorthand for experimental.

You can see more information if you issue istioctl x without any additional commands:

Source https://stackoverflow.com/questions/70581288

QUESTION

Istio and the custom HTTP method

Asked 2022-Jan-03 at 10:54

How to make Istio route custom HTTP methods?

...

ANSWER

Answered 2022-Jan-03 at 10:54

Envoy does not support custom HTTP methods. Envoy implements the H/1 codec, which has a hardcoded list of HTTP methods it accepts (see RFC)

There is an open issue on the Envoy Github: https://github.com/envoyproxy/envoy/issues/18819

So you can't achieve what you want with an HTTP route. But you can make it work with a TCP/TLS route.

For this do the following:

Set the correct protocol on the service istio-ingressgateway:

Source https://stackoverflow.com/questions/70516906

QUESTION

Able to access Elasticsearch with Python's Requests but not with official client

Asked 2021-Dec-30 at 09:56

I have an Elasticsearch DB running on Kubernetes exposed to my_domain.com/elastic as an Istio virtual service, which I have no problem accessing via the browser (as in I get to login successfully to the endpoint). I can also query the DB with Python's Requests. But I can't access the DB with the official python client if I use my_domain.com/elastic. The LoadBalancer IP works perfectly well even with the client. What am I missing? I have SSL certificates set up for my_domain.com via Cert-Manager and CloudFlare.

This works:

...

ANSWER

Answered 2021-Dec-30 at 09:56

I have reproduced your problem and the solution is as follows. First, pay attention to your yaml file:

Source https://stackoverflow.com/questions/70396272

QUESTION

How to restrict pod egress traffic only to external

Asked 2021-Nov-12 at 12:35

I need to restrict pod egress traffic to external destinations. Pod should be able to access any destination on the internet and all cluster internal destinations should be denied.

This is what I tried and it is not passing validation:

...

ANSWER

Answered 2021-Nov-12 at 12:35

I did it using NetworkPolicy. Allow traffic to kubernetes and istio related services (could be more restrictive not just based on the namespace):

Source https://stackoverflow.com/questions/69839229

QUESTION

Istio Virtualservice creation access denied

Asked 2021-Nov-04 at 04:21

I am trying to create an Istio Virtualservice. However, I am getting the below error, despite me having the cluster-admin role bound to.

...

ANSWER

Answered 2021-Nov-04 at 04:21

The solution was to add the user to the cluster-admin role

Source https://stackoverflow.com/questions/69728899

QUESTION

How to use Istio Service Entry object to connect two services in different namespace?

Asked 2021-Oct-26 at 07:49

I have two services, say svcA and svcB that may sit in different namespaces or even in different k8s clusters. I want to configure the services so that svcA can refer to svcB using some constant address, then deploy an Istio Service Entry object depending on the environment to route the request. I will use Helm to do the deployment, so using a condition to choose the object to deploy is easy.

If svcB is in a completely different cluster, it is just like any external server and is easy to configure.

But when it is in a different namespace on the same cluster, I just could not get the Service Entry work. Maybe I don't understand all the options it provides.

Istio objects ...

ANSWER

Answered 2021-Oct-25 at 13:27

I have posted community wiki answer to summarize the topic and paste explanation of the problem:

After doing some random/crazy test, I found that the alias domain name must ends with well know suffix, like .com, .org, arbitrary suffix, like .svc, .alias, won't work.

If I update the above ServiceEntry object to like this. My application works.

Source https://stackoverflow.com/questions/69626959

QUESTION

How to debug an EnvoyFilter in Istio?

Asked 2021-Oct-14 at 18:49

I have the following filter:

...

ANSWER

Answered 2021-Oct-12 at 13:46

This topic is very well described in the documentation:

The simplest kind of Istio logging is Envoy’s access logging. Envoy proxies print access information to their standard output. The standard output of Envoy’s containers can then be printed by the kubectl logs command.

You have asked:

Where can I see what filters are applied each request?

Based on this issue on github:

There is no generic mechanism.

It follows that if you wanted to see what filter was applied to each request, you would have to create your custom solution.

However, without any problem, you can get logs about each request based on this fragment in the documentation:

If you used an IstioOperator CR to install Istio, add the following field to your configuration:

Source https://stackoverflow.com/questions/69537941

QUESTION

'Duplicate entries for key' error when creating an Istio IngrressGateway on EKS

Asked 2021-Oct-08 at 07:47

I'm trying to create an Istio ingress gateway (istio: 1.9.1, EKS: 1.18) with a duplicate targetPort like this:

...

ANSWER

Answered 2021-Oct-06 at 19:15

Had to use different targetPorts in the end to get this working

Source https://stackoverflow.com/questions/69313669

QUESTION

"pilot.validation.istio.io" fails on GKE

Asked 2021-Aug-31 at 07:56

I enabled Istio on GKE using istio-addon. According to the images the version of Istio is 1.6. Deployment of the application, which contains RequestAuthentication resource gives the following error:

...

ANSWER

Answered 2021-Aug-30 at 07:45

I have posted community wiki answer for better visibility.

As Katya Gorshkova has mentioned in the comment:

Finally, I turned off istio addon and installed the newest istio 1.11.1. It worked without any problems

Vulnerabilities

No vulnerabilities reported

Install istio.io

You can download it from GitHub.

Support

The site is translated into multiple languages. Source of truth is the English content, while other languages are derived and so tend to lag behind slightly. Each site language gets its own fully self-contained content directory and translation table file. Languages are identified using their international 2-letter language code. The main site content is located in content/<language code> (e.g. content/en), and the translation table is a TOML-format file in i18n\<language code>.toml (e.g. i18n/en.toml).

Find more information at: