Iris

Results 10 comments of Iris

@ostromart @howardjohn @rcernich I agree the comments that we should not delete the namespace if it is created by user. But if the namespace is created by our operator. It...

@ostromart @sdake @howardjohn @rcernich @linsun Thanks guys for your comments here. SO we have two namespace here: the operator namespace and the istio installation namespace(eg: istio-system). I agree we should...

@vigneshrockfort try https://istio.io/latest/docs/tasks/security/cert-management/custom-ca-k8s/ The only requirement for this is your private CA can consume the kubernetes certificate signing request.

https://github.com/istio/istio/tree/release-1.17/samples/security/spire this is another option, you can try to see whether you can leverage it if your private CA can not consume Kubernetes CSR.

2024-02-07T03:38:59.937210Z WARN inbound{^[[3mid^[[0m^[[2m=^[[0mda468de6f15cfd1539e6af8a9f7c707a ^[[3mpeer_ip^[[0m^[[2m=^[[0m10.244.138.36 ^[[3mpeer_id^[[0m^[[2m=^[[0mspiffe://cluster.local/ns/bookinfo-1-39307/sa/bookinfo-productpage}: ztunnel::proxy::inbound: connection to 10.244.138.16:9080 failed: Connection refused (os error 111) dur=112.7µs 2024-02-07T03:38:59.937356Z WARN proxy{^[[3muid^[[0m^[[2m=^[[0m0cbc3388-4ec7-4c35-b963-67e83bb82e12}:outbound{^[[3mid^[[0m^[[2m=^[[0mda468de6f15cfd1539e6af8a9f7c707a}: ztunnel::proxy::outbound: failed dur=2.932183ms err=http status: 503 Service Unavailable 2024-02-07T03:38:59.628120Z info Running...

tried manually: workload pods are deployed before ambient label is added -> enroll in ambient without restart workload pods --> successful pods are deployed after ambient label is added. ->...

OPEA already has [GenAI Microservices Connector](https://github.com/opea-project/GenAIInfra/tree/main/microservices-connector) for composing pipeline dynamically, please check via https://github.com/opea-project/GenAIInfra/blob/673e7c820667c92f56460161a20c054803cb431f/microservices-connector/README.md for some introduction.

Thanks @rootsongjc for this initiative and proposal! @howardjohn @linsun @craigbox @kfaseela @rcernich @justinpettit @ctrath @hzxuzhonghu please take a look for the proposal.