Hello, dear folks. How are you? Can someone help me with a doubt?
helm templates as the default installation method for Istio (without IstioOperator), according to the NOTES.md is expected that now (v1.5+) as a good practice I create my Istio Ingress-Gateways in a namespace other than
istio-system due to security and maintainability matters.
When I checked the installation I saw that the new Istio Ingress was not sending spans to my custom Zipkin domain but instead was using the default one:
zipkin:9411. Digging further I checked that the proxy’s configuration was not inheriting my tracing configuration based on the
istio configmap. Any other namespaces inside the ServiceMesh (
enabled) inherit the configuration correctly at the
What I would like to know is either how to configure tracing for an istio ingress configured in a namespace different than
istio-system based on its values.yaml or inherit from the pilot’s one without having to manually clone the configmap to the istio ingress’ namespace, which works due to an optional mountVolume:
kubectl get deployment istio-ingressgateway -o yaml -n istio-gateways
- name: config-volume configMap: name: istio optional: true
According to the chart, this configmap is only created by
istio-pilot and it’s located at the rootNamespace