I’m getting random Empty response from server
I have an ingress gateway service with a AWS NLB and SSL-Cert defined as annotations.
Also I have two gateways in differents namespaces
Any thoughts?
I don’t think that this would be the problem
Here I let you my settings.
apiVersion: v1
kind: Service
metadata:
annotations:
service.beta.kubernetes.io/aws-load-balancer-backend-protocol: http
service.beta.kubernetes.io/aws-load-balancer-ssl-cert: arn:aws:acm:...
service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS-1-2-2017-01
service.beta.kubernetes.io/aws-load-balancer-ssl-ports: https
service.beta.kubernetes.io/aws-load-balancer-type: nlb
finalizers:
- service.kubernetes.io/load-balancer-cleanup
labels:
app: istio-ingressgateway
install.operator.istio.io/owning-resource: default-istio-controlplane
install.operator.istio.io/owning-resource-namespace: istio-system
istio: ingressgateway
istio.io/rev: default
operator.istio.io/component: IngressGateways
operator.istio.io/managed: Reconcile
operator.istio.io/version: 1.9.1
release: istio
name: istio-ingressgateway
namespace: istio-system
spec:
externalTrafficPolicy: Cluster
ports:
- name: status-port
nodePort: 31309
port: 15021
protocol: TCP
targetPort: 15021
- name: http2
nodePort: 32141
port: 80
protocol: TCP
targetPort: 8080
- name: https
nodePort: 30518
port: 443
protocol: TCP
targetPort: 8443
- name: tcp-istiod
nodePort: 32171
port: 15012
protocol: TCP
targetPort: 15012
- name: tls
nodePort: 32339
port: 15443
protocol: TCP
targetPort: 15443
selector:
app: istio-ingressgateway
istio: ingressgateway
sessionAffinity: None
type: LoadBalancer
---
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
name: foo-gateway
namespace: foo
spec:
selector:
app: istio-ingressgateway
servers:
- hosts:
- foo.example.com
port:
name: http
number: 80
protocol: HTTP
tls:
httpsRedirect: true
- hosts:
- foo.example.com
port:
name: http-foo
number: 443
protocol: HTTP
---
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
name: bar-gateway
namespace: bar
spec:
selector:
app: istio-ingressgateway
servers:
- hosts:
- bar.example.com
port:
name: http
number: 80
protocol: HTTP
tls:
httpsRedirect: true
- hosts:
- bar.example.com
port:
name: http-bar
number: 443
protocol: HTTP