Google managed istio


Does anyone what version of istio is supported in Google’s managed istio solution.


It seems that Istio version depends to GKE cluster master version. If you cluster is updated to the last version of GKE (1.11.6-gke.6), Istio version should be : 1.0.3-gke.3.
Please take a look at:
That what I could see also when checking istio config map:


The GKE Istio add-on 1.0.3-gke.3 has some issues, this is what I got so far:

HPA is broken

NAME                   REFERENCE                         TARGETS         MINPODS   MAXPODS   REPLICAS   AGE
istio-egressgateway    Deployment/istio-egressgateway    <unknown>/80%   1         5         1          7d
istio-ingressgateway   Deployment/istio-ingressgateway   <unknown>/80%   1         5         1          7d
istio-pilot            Deployment/istio-pilot            <unknown>/80%   1         5         1          7d
istio-policy           Deployment/istio-policy           <unknown>/80%   1         5         1          7d
istio-telemetry        Deployment/istio-telemetry        <unknown>/80%   1         5         1          7d
the HPA was unable to compute the replica count: missing request for cpu on container
istio-proxy in pod istio-system/istio-ingressgateway-774d77cb7c-slbgv

Istio telemetry is crashing

Stackdriver returned: rpc error: code = InvalidArgument desc = One or more TimeSeries could not be written: The set of resource labels is incomplete. Missing labels: (zone).: timeSeries[65,66]
OpenCensus Stackdriver exporter: failed to upload span: buffer full

Ingress does not preserve client IP

The svc/istio-ingressgateway externalTrafficPolicy: Cluster should be Local but you can’t alter the LoadBalancer definition since GKE will override it.

Egress is blocked

/home/app $ curl -v

< HTTP/1.1 404 Not Found
< date: Tue, 05 Feb 2019 17:56:02 GMT
< server: envoy
< content-length: 0

Workaround: add service entries for each external address.