Kevin Bates

Hi @tahesse - thanks for opening this issue and the great details! I will try to take a look into this next week but if anyone else wants to look...

> 10.100.44.42 is indeed an IP address in our subnet (it should be the node IP). 172.20.43.27 does look like a local (container/pod) IP, is that the intended behavior? Yes,...

> EG_PROHIBITED_LOCAL_IPS='10.100.*.*' python3 -m jupyterlab --debug \ --gateway-url=http://enterprise-gateway.ns-jupyter:8888 \ --GatewayClient.http_user=guest \ --GatewayClient.http_pwd=guest-password \ --GatewayClient.request_timeout=240.0 \ --GatewayClient.connect_timeout=240.0 This is setting the env `EG_PROHIBITED_LOCAL_IPS` only in the jupyter lab process - where...

> Setting the EG_PROHIBITED_LOCAL_IPS on the deployment.yaml did work but prevents all connections to/from enterprise-gateway. Hmm - this should not have any bearing on the accessibility of EG from applications....

>> Hmm - this should not have any bearing on the accessibility of EG from applications. Could you clarify what you mean by prevents all connections to/from enterprise-gateway? >I cannot...

> I can confirm that the issue is due to istio Great news. > Is there interest from the enterprise-gateway maintainer side to support istio? We are always interested in...

> try to come up with a PR that extends the proxies ability to support istio's envoy sidecar reverse proxies. I don't know anything about Istio, but this implies it...

Let's keep this issue open. I've gone ahead and amended the title to include the istio context. Thank you for your help.

Hi @tahesse. > What do you think? I'll test it meanwhile in my cluster and post some code to my ideas asap. I think a configurable approach is ideal, one...

> What do you think about having a kubernetes Service for the kernel pods at all times? You might be interested in #1181. This enables the ability to add your...