Cannot enable external tracing (zipkin.address) on ingress

Policies and Telemetry
1

Dear all,
I would like to configure tracing on ingress which is install on user namespace but it does not work.

My environment info

  • AWS EKS 1.17
  • Istio 1.7.2

This is my configuration

kind: IstioOperator
metadata:
  name: pony-ingressgateway
  namespace: istio-system
spec:
  components:
    base:
      enabled: false
    pilot:
      enabled: false
    ingressGateways:
    - enabled: true
      label:
        app: pony-external-ingressgateway
        istio: pony-external-ingressgateway
      k8s:
        env:
        - name: ISTIO_META_ROUTER_MODE
          value: sni-dnat
        # serviceAnnotations:
        #   service.beta.kubernetes.io/aws-load-balancer-type: nlb
        hpaSpec:
          maxReplicas: 5
          metrics:
          - resource:
              name: cpu
              targetAverageUtilization: 80
            type: Resource
          minReplicas: 1
          scaleTargetRef:
            apiVersion: apps/v1
            kind: Deployment
            name: pony-external-ingressgateway
        resources:
          limits:
            cpu: 2000m
            memory: 1024Mi
          requests:
            cpu: 10m
            memory: 40Mi
        service:
          ports:
          - name: http2
            port: 80
            targetPort: 9180
          - name: https
            port: 443
            targetPort: 9543
        strategy:
          rollingUpdate:
            maxSurge: 100%
            maxUnavailable: 25%
      name: pony-external-ingressgateway
      namespace: istio-ingress
  profile: empty
  tag: 1.7.2
  meshConfig:
    accessLogFile: /dev/stdout
    enableTracing: true
    defaultConfig:
      proxyMetadata: {}
      terminationDrainDuration: 5s
      zipkinAddress: jaeger.istio-cluster-01.internal:9411
      tracing:
        sampling: 100
    enablePrometheusMerge: true
  values:
    gateways:
      istio-ingressgateway:
        applicationPorts: ""
        autoscaleEnabled: true
        debug: info
        domain: ""
        env: {}
        meshExpansionPorts:
        - name: tcp-istiod
          port: 15012
          targetPort: 15012
        - name: tcp-dns-tls
          port: 853
          targetPort: 8853
        name: pony-istio-ingressgateway
        secretVolumes:
        - mountPath: /etc/istio/ingressgateway-certs
          name: ingressgateway-certs
          secretName: wildcert-digitial-sandbox-com
        - mountPath: /etc/istio/ingressgateway-ca-certs
          name: ingressgateway-ca-certs
          secretName: wildcert-digitial-sandbox-com
        type: LoadBalancer
        zvpn: {}
2

I’m not an expert, but I’ve just set up tracing myself so I thought I’d have a look here. A couple of thoughts:

  • it’s very hard to read that config you pasted. Can you please put it in a Markdown code block instead of blockquoting it?
  • zipkinAddress is deprecated. You should mention what version of Istio you are using, rather than making people guess.

Blockquote is for prose, not code

yaml:
  - reads: much better
    with: code blocks
1 Like
3

Thanks for suggestion.

4

Moreover –zipkinAddress is ignored by /usr/local/bin/pilot-agent proxy sidecar inside sidecar proxy container