helm-charts
helm-charts copied to clipboard
istioctl x precheck fails when jaeger is installed in a namespace that has istio sidecar injection
Describe the bug When running istioctl x precheck to see if the cluster is ok to upgrade / install istio to the following error occurs
Error [IST0143] (Pod istio-addons/istio-jaeger-cassandra-0) Port 7199 is exposed in a Service but listens on localhost. It will not be exposed to other pods.
Information on this check: https://istio.io/latest/docs/reference/config/analysis/ist0143/
To Reproduce Helm install jaeger chart version jaeger-0.53.0 app version 1.28.0 into a namespace that has istio injection enabled run istioctl x precheck afterwards
Expected behavior Expected behavior is for istioctl x precheck to be successful
Version (please complete the following information):
- OS: [e.g. Linux]
- Jaeger version: [e.g. 1.8]
- Deployment: kubernetes
- istio version: 1.12.4
Additional context Add any other context about the problem here.
I think the solution would be to either:
remove 7199 from the following locations:
jaeger % grep -R "7199" .
./charts/cassandra/templates/service.yaml: port: 7199
./charts/cassandra/templates/service.yaml: targetPort: 7199
./charts/cassandra/templates/statefulset.yaml: containerPort: 7199
or have port 7199 not listen on localhost but the same ip address as what the other services are listening on