Unable to setup webhook side car injection

[gcallaghan]

Is this a BUG or FEATURE REQUEST?: BUG Did you review https://istio.io/help/ and existing issues to identify if this is already solved or being worked on?: Yes Bug: Y

What Version of Istio and Kubernetes are you using, where did you get Istio from, Installation details

$ ./bin/istioctl version
Version: 0.5.1
GitRevision: 30acfe6528107ea333543309095659b93364b30d
User: root@2e4a18076b04
Hub: docker.io/istio
GolangVersion: go1.9
BuildStatus: Clean
$ kubectl version
Client Version: version.Info{Major:"1", Minor:"9", GitVersion:"v1.9.3", GitCommit:"d2835416544f298c919e2ead3be3d0864b52323b", GitTreeState:"clean", BuildDate:"2018-02-09T21:51:54Z", GoVersion:"go1.9.4", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"9", GitVersion:"v1.9.3", GitCommit:"d2835416544f298c919e2ead3be3d0864b52323b", GitTreeState:"clean", BuildDate:"2018-02-07T11:55:20Z", GoVersion:"go1.9.2", Compiler:"gc", Platform:"linux/amd64"}

Is Istio Auth enabled or not ? Enabled. I installed istio-auth.yaml

What happened: Deleting the sleep example pod comes back with 1/1 What you expected to happen: the sleep pod to be restarted with 2/2 How to reproduce it:

I started with a single node bitnami kubernetes instance in aws. I updated the node and proceeded to step through the documentation. I started fresh and stepped through multiple times ensuring that I did not miss a step. I cannot find any logs with errors, the injection just seems not to happen on pod create.

[gcallaghan]

Partial history of commands following download and extraction of istio 5.1 for osx:

 2608  kubectl apply -f install/kubernetes/istio-auth.yaml
 2609  kubectl api-versions | grep admissionregistration
 2613  ./install/kubernetes/webhook-create-signed-cert.sh     --service istio-sidecar-injector     --namespace istio-system     --secret sidecar-injector-certs
 2614  chmod +x ./install/kubernetes/*.sh
 2615  ./install/kubernetes/webhook-create-signed-cert.sh     --service istio-sidecar-injector     --namespace istio-system     --secret sidecar-injector-certs
 2616  kubectl apply -f install/kubernetes/istio-sidecar-injector-configmap-release.yaml
 2620  cat install/kubernetes/istio-sidecar-injector.yaml |      ./install/kubernetes/webhook-patch-ca-bundle.sh >      install/kubernetes/istio-sidecar-injector-with-ca-bundle.yaml
 2621  kubectl apply -f install/kubernetes/istio-sidecar-injector-with-ca-bundle.yaml
 2622  kubectl -n istio-system get deployment -listio=sidecar-injector
 2623  kubectl -n istio-system get pod
 2624  kubectl -n istio-system logs istio-sidecar-injector-7b559f7f6f-2tghq
 2625  kubectl -n istio-system logs -t istio-sidecar-injector-7b559f7f6f-2tghq
 2629  kubectl get namespace -L istio-injection
 2633  kubectl apply -f samples/sleep/sleep.yaml
 2634  kubectl get pods
 2635  kubectl label namespace default istio-injection=enabled
 2636  kubectl get namespace -L istio-injection
 2637  kubectl delete pod sleep-776b7bcdcd-m9bs9
 2638  kubectl get pod
 2639  kubectl delete pod sleep-776b7bcdcd-m9bs9