John Howard comments

Results 1682 comments of


                                            John Howard

Increase Gateway CRD Infrastructure Annotation Limit

backendProtocol: service.ports.appProtocol certificate-arn: gateway.spec.tls actions: HTTPRoute ip-address-type: gateway.spec.address listen-ports: gateway.spec.listenres

Support for MeshFrontendHostname cannot be indicated separately.

I am a bit confused that we cannot report "not support MeshFrontendHostname"? Is this not reported via ``` skippedTests: - MeshFrontendHostname ```

ServiceEntry is causing SSL validation errors when acting as a TLS passthrough to an external IPv4 HTTPS service on an IPv6 cluster

So a bit more analysis of the problem. 1. Auto allocation gives an IPv6 and v4 address, but we filter out the v4 address. End up getting a DNS entry...

ServiceEntry is causing SSL validation errors when acting as a TLS passthrough to an external IPv4 HTTPS service on an IPv6 cluster

I put up a draft fix in https://github.com/istio/istio/pull/52733. Its unfortunate we don't have a great way of integration testing this unique environment (aside from manual testing, which I did to...

ServiceEntry is causing SSL validation errors when acting as a TLS passthrough to an external IPv4 HTTPS service on an IPv6 cluster

This is broken on ambient for another reason which https://github.com/istio/ztunnel/pull/1218 fixes btw (happy coincidence)

Incompletely support of traffic.sidecar.istio.io/excludeOutboundIPRanges while upgrading istio from version 1.15.2 to 1.20

istio.io/rev is a label, not an annotation. I recommend opening a discussion (https://github.com/istio/istio/discussions) or slack thread for questions, re-opening closed issues will not likely get noticed quickly (as you may...

Kubernetes Gateway API samples do not work on AKS - suggested fix and docs improvement

Closing since this was fixed in AKS 1.29 and there is nothing to do on Istio's end. Thanks all

HTTP/L7 metrics for TLS-terminated downstream requests in a Gateway

I think the current state is: * This can work with a waypoint instead. Not well documented, but I plan to in a couple weeks hopefully * Could be done...

Cronjobs intermittently failed due to Istio sidecar terminating with error "unable to read file: etc/istio/proxy/envoy-rev.json"

@jbilliau-rcd did you ever figure out if this was caused by dynatrace?

Cronjobs intermittently failed due to Istio sidecar terminating with error "unable to read file: etc/istio/proxy/envoy-rev.json"

Good to hear, thanks for the context!