Blocked(v 1.6.8) in creating istio-certs(/etc/istio-certs) for prometheus with metadata annotations using proxy.istio.io config

Policies and Telemetry
1

Unable to fetch the certs for prometheus using the metadata annotations as specifed in istio docs

Istio version : v 1.6.8

spec:
template:
metadata:
annotations:
sidecar.istio.io/inject: “true”
traffic.sidecar.istio.io/includeInboundPorts: “” # do not intercept any inbound ports
traffic.sidecar.istio.io/includeOutboundIPRanges: “” # do not intercept any outbound traffic
proxy.istio.io/config: | # configure an env variable OUTPUT_CERTS to write certificates to the given folder
proxyMetadata:
OUTPUT_CERTS: /etc/istio-output-certs
sidecar.istio.io/userVolume: ‘[{“name”: “istio-certs”, “emptyDir”: {“medium”:“Memory”}}]’ # mount the shared volume
sidecar.istio.io/userVolumeMount: ‘[{“name”: “istio-certs”, “mountPath”: “/etc/istio-output-certs”}]’

Any help here would be really helpful

2

Interesting @Dinesh_N , I am also facing the same issue.

3

Yeah @varunkrishna - looks like its a bug in istio-1.6.8
Can someone please shed some light here - would be off tremendous help

4

@howardjohn - Any clue here