I’m running version 1.5.2 in kubernetes 1.18, and i’m just a new player. I read all what is relevant for new istio users, but cannot understand why i’m still falling with 404.
I’m using the gateway created as part of the installation:
[root@k8s-node-1 tmp]# kubectl get gateway -A
NAMESPACE NAME AGE
istio-system istio-ingressgateway 21h
[root@k8s-node-1 tmp]# kubectl describe gateway/istio-ingressgateway -n istio-system
Name: istio-ingressgateway
Namespace: istio-system
Labels: operator.istio.io/component=IngressGateways
operator.istio.io/managed=Reconcile
operator.istio.io/version=1.5.2
release=istio
Annotations: API Version: networking.istio.io/v1beta1
Kind: Gateway
Metadata:
Creation Timestamp: 2020-04-28T16:25:21Z
Generation: 1
Managed Fields:
API Version: networking.istio.io/v1alpha3
Fields Type: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.:
f:kubectl.kubernetes.io/last-applied-configuration:
f:labels:
.:
f:operator.istio.io/component:
f:operator.istio.io/managed:
f:operator.istio.io/version:
f:release:
f:spec:
.:
f:selector:
.:
f:app:
f:istio:
f:servers:
Manager: kubectl
Operation: Update
Time: 2020-04-28T16:25:21Z
Resource Version: 104660
Self Link: /apis/networking.istio.io/v1beta1/namespaces/istio-system/gateways/istio-ingressgateway
UID: 8bbc2464-a0fc-4ae3-956d-68421357dade
Spec:
Selector:
App: istio-ingressgateway
Istio: ingressgateway
Servers:
Hosts:
*
Port:
Name: http
Number: 80
Protocol: HTTP
Events:
I created a virtual service as follows:
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
name: keycloak-http
spec:
gateways:
- ingressgateway.istio-system.svc.cluster.local
hosts:- ‘*’
http:- match:
- uri:
prefix: /auth
route:- destination:
host: keycloak-http
port:
number: 80
Output of proxy-config:
[
{
“name”: “http.80”,
“virtualHosts”: [
{
“name”: “blackhole:80”,
“domains”: [
“"
],
“routes”: [
{
“name”: “default”,
“match”: {
“prefix”: “/”
},
“directResponse”: {
“status”: 404
}
}
]
}
],
“validateClusters”: false
},
{
“virtualHosts”: [
{
“name”: “backend”,
“domains”: [
"”
],
“routes”: [
{
“match”: {
“prefix”: “/stats/prometheus”
},
“route”: {
“cluster”: “prometheus_stats”
}
}
]
}
]
}
]
Output of proxy-status:
NAME CDS LDS EDS RDS PILOT VERSION
istio-ingressgateway-6cf56d9598-prf8g.istio-system SYNCED SYNCED SYNCED SYNCED istiod-c7757dcf7-976m4 1.5.2
keycloak-0.default SYNCED SYNCED SYNCED SYNCED istiod-c7757dcf7-976m4 1.5.2
prometheus-dfd976959-s6sqj.istio-system SYNCED SYNCED SYNCED SYNCED istiod-c7757dcf7-976m4 1.5.2
What wrong with the virtual service definition ?
Can you please give me some hints ?
Thanks,
yaakov