helm-charts icon indicating copy to clipboard operation
helm-charts copied to clipboard

istioctl x precheck fails when jaeger is installed in a namespace that has istio sidecar injection

Open ceastman-r7 opened this issue 2 years ago • 0 comments

Describe the bug When running istioctl x precheck to see if the cluster is ok to upgrade / install istio to the following error occurs

Error [IST0143] (Pod istio-addons/istio-jaeger-cassandra-0) Port 7199 is exposed in a Service but listens on localhost. It will not be exposed to other pods.

Information on this check: https://istio.io/latest/docs/reference/config/analysis/ist0143/

To Reproduce Helm install jaeger chart version jaeger-0.53.0 app version 1.28.0 into a namespace that has istio injection enabled run istioctl x precheck afterwards

Expected behavior Expected behavior is for istioctl x precheck to be successful

Version (please complete the following information):

  • OS: [e.g. Linux]
  • Jaeger version: [e.g. 1.8]
  • Deployment: kubernetes
  • istio version: 1.12.4

Additional context Add any other context about the problem here.

I think the solution would be to either: remove 7199 from the following locations: jaeger % grep -R "7199" .
./charts/cassandra/templates/service.yaml: port: 7199 ./charts/cassandra/templates/service.yaml: targetPort: 7199 ./charts/cassandra/templates/statefulset.yaml: containerPort: 7199

or have port 7199 not listen on localhost but the same ip address as what the other services are listening on

ceastman-r7 avatar Apr 13 '22 14:04 ceastman-r7