Hi, I’ve installed the latest version of istio.
But when I try to reach my pods with their cluster ip (from the kubernetes master) i receive some error codes.
In example I’m trying to make a curl on a nginx pod and i get
curl: (56) Recv failure: Connection reset by peer
Are there any settings that I could check to solve this?
We’re probably going to need a lot more detail to help you out, including the settings you installed with.
However, one thing to check is whether mutually authenticated TLS (mTLS) is enabled and set to STRICT. https://istio.io/docs/tasks/security/authn-policy/#globally-enabling-istio-mutual-tls
If so, then I’d expect to see the behavior you describe. With mTLS enabled the Istio proxies expect a TLS connection with a client certificate, which your curl from the master isn’t doing, so the proxy terminates the connection.