AKS icon indicating copy to clipboard operation
AKS copied to clipboard

AKS IStio add on not working with kubernetes gateway api only for download files

Open veldpworld opened this issue 8 months ago • 2 comments

We deployed aks istio 1-23 version ingress controller and using gateway api 1.2

istio version : aks - 1.23 gateway api version: 1.2 error: upstream connect error or disconnect/reset before headers. reset reason: protocol error reason: when try to download the file it gives the above error.

> POST /ledger/api/v1/documents/download-documents?documentId=a736d26d-6fa1-45e9-a628-310a44a80a7e HTTP/1.1
> Host: dev-finance-erp.cargoes.com
> User-Agent: curl/7.81.0
> accept: */*
> Content-Type: application/json
> Cookie: JSESSIONID=5F69D25B5EE5592A2BDB889797A77DCD; JSESSIONID=796158313F43AFE548B32165926D4C97
> Content-Length: 322
>
* Mark bundle as not supporting multiuse
< HTTP/1.1 502 Bad Gateway
< content-length: 87
< content-type: text/plain
< date: Tue, 25 Mar 2025 07:18:02 GMT
< server: istio-envoy
<
* Connection #0 to host dev-finance-erp.cargoes.com left intact
upstream connect error or disconnect/reset before headers. reset reason: protocol errormyvel@DPW-HO-693:~$

we are not using envoy proxy, we use kubernetes gateway api class to refer the istio controller, using httproute we create ingress and it worked fine for get request, but for downloading any file it gave above error

Version myvel@DPW-HO-693:~$ istioctl version -i aks-istio-system client version: 1.23.0 control plane version: 1.23-dev data plane version: 1.23-dev (2 proxies)\

##Error upstream connect error or disconnect/reset before headers. reset reason: protocol error

its not working with or without sidecar enabled. we need to fix this issue without side car enabled. is there any annotation or configmap to force the same protocol?

veldpworld avatar Mar 25 '25 07:03 veldpworld

@azure/aks-traffic would you be able to assist?

Commented on https://github.com/istio/istio/issues/55656

keithmattix avatar Mar 25 '25 15:03 keithmattix

Action required from @aritraghosh, @julia-yin, @AllenWen-at-Azure

Since the issue is tracked in https://github.com/istio/istio/issues/55656, we will close this issue.

Winbobob avatar Apr 17 '25 17:04 Winbobob