Questions tagged [istio]
Istio is an open-source platform for managing and securing microservices
istio
2,685
questions
0
votes
0
answers
29
views
EnvoyFilter Rate Limiting for UI webapp on concurrent requests from any single IP
I have read about global and local rate limiting. We have requirements for rate limiting traffic to our UI pod deployed on k8s from users who may attempt DDOS. We would like to limit any single IP ...
0
votes
0
answers
23
views
Error in OpenTelemetry With Istio: sending queue is full
I'm using OpenTelemetry as a tracing collector in istio, but after running OpenTelemetry Collector for a while, the logs for istio-ingressgateway and the logs for Sidecar (istio-proxy) in the Pod keep ...
0
votes
0
answers
15
views
istio virtual service with multiple root paths
i have been on this implementation for a few days now and for the life of me i cannot solve the issue and i am running out of ideas and knowledge, without talking about the level of frustration.
i am ...
- 1,389
0
votes
1
answer
24
views
How to configure the ingress gateway in istio?
I am trying to install istio on an aks according to the documentation, I am using these commands
helm repo add istio https://istio-release.storage.googleapis.com/charts
helm repo update
kubectl create ...
0
votes
0
answers
19
views
Enable/disable mTLS per service URL path
I have a question:
Is it possible to enable/disable mTLS for particular URL?
Lets consider the situation I have:
Service_A exposes port 8080 and it serves several URLs like /, /status, /metrics
So I ...
0
votes
0
answers
32
views
Multiple Istio Mesh in single EKS cluster
We are running an Istio mesh in one single EKS cluster.
The setup looks like this:
One Istio Control Plane
One Mesh
Two Applications Namespaces (K8s)
Due to different business workload, I am ...
- 109
0
votes
0
answers
30
views
Istio Ingress Gateway not become ready
I am installing istio to my cluster and have a weird behavior.
EKS version I am using is 1.28 and I have tested with istio version of 1.18.3, 1.19.10 and 1.22.1.
The yaml configurations file for the ...
0
votes
0
answers
19
views
not able to use multiple gateways with AuthorizationPolicy on istio gateway (RBAC: access denied)
I have to use multiple gateways which are namespace wise where as, every namespace has its own AuthorizationPolicy either to allow the traffic or DENY the traffic on IP based block
e.g
my default ...
0
votes
0
answers
31
views
Unable to Access Node.js Application on Internet deployed under SAP BTP Kyma Environment
I have deployed a Node.js application in the SAP BTP Kyma environment. I have enabled Istio sidecar injection in my namespace and created an API Rule to expose my service to the internet. However, I ...
-1
votes
0
answers
45
views
ISTIO and Postgres connectivity
I have EKS cluster with istio installed. I have namespace with istio injection enabled. I have postgress statefulset running there with sidecar. I have another service that too have sidecar. When I ...
- 157
0
votes
0
answers
22
views
PostgreSQL External Service Proxy, and Keycloak JWT
Overview
I'm still somewhat new to Istio and have a bit of a weird setup that is mostly working. I would like to use my Istio service mesh to as a DB proxy (that part works), where I'm stuck is ...
0
votes
1
answer
20
views
TLS and plain text traffic to the same sidecar
I am trying to transition my legacy applications to the service mesh. To do this, I would like to support both plaintext traffic and TLS traffic into the Pod so that application in the same ...
- 1
0
votes
1
answer
54
views
Istio configuration for persistent connections for push notifications using SSE with Spring WebFlux
I am new to Istio and need help configuring it to maintain persistent connections for push notifications using Server-Sent Events (SSE) with Spring WebFlux. My goal is to ensure these connections ...
- 11
0
votes
1
answer
38
views
Envoy: two rate limits (global + per user) on the same HTTP endpoint
I am trying to set rate limits for an endpoint which is accessed via an API token as a HTTP header. In order to protect the stability of the service, I want to set two distinct API rate limits: I want ...
- 999
0
votes
0
answers
13
views
Istio GKE ciphersuites
I want to add cipher suits for my istio gke setup. I have added the cipher suits in below pattern, but while testing it through ssllabs site, I cannot see the ciphers added.
Format:
- hosts:
- '...
