getting below error:**
[root@itfopay-prod3-master1 wipuxadm]# istioctl install --set profile=demo
This will install the Istio 1.16.1 demo profile with ["Istio core" "Istiod" "Ingress gateways" "Egress gateways"] components into the cluster. Proceed? (y/N) y
✔ Istio core installed
✔ Istiod installed
✘ Egress gateways encountered an error: failed to wait for resource: resources not ready after 5m0s: timed out waiting for the conditionsystem/istio-ingressgateway
Deployment/istio-system/istio-egressgateway (containers with unready status: [istio-proxy])
✘ Ingress gateways encountered an error: failed to wait for resource: resources not ready after 5m0s: timed out waiting for the condition
Deployment/istio-system/istio-ingressgateway (containers with unready status: [istio-proxy])
- Pruning removed resources
I checked the Ingress logs and getting:
[root@itfopay-prod3-master1 wipuxadm]# k get po -n istio-system
NAME READY STATUS RESTARTS AGE
istio-egressgateway-7475c75b68-qjdv9 0/1 Running 0 10m
istio-ingressgateway-6688c7f65d-9hk2q 0/1 Running 0 10m
istiod-885df7bc9-m5zrb 1/1 Running 0 10m
Ingress Pod log:
[root@itfopay-prod3-master1 wipuxadm]# k logs -f -n istio-system istio-ingressgateway-6688c7f65d-9hk2q
2023-01-21T09:50:19.722804Z info FLAG: --concurrency="0"
2023-01-21T09:50:19.722836Z info FLAG: --domain="istio-system.svc.cluster.local"
2023-01-21T09:50:19.722843Z info FLAG: --help="false"
2023-01-21T09:50:19.722846Z info FLAG: --log_as_json="false"
2023-01-21T09:50:19.722849Z info FLAG: --log_caller=""
2023-01-21T09:50:19.722851Z info FLAG: --log_output_level="default:info"
2023-01-21T09:50:19.722854Z info FLAG: --log_rotate=""
2023-01-21T09:50:19.722857Z info FLAG: --log_rotate_max_age="30"
2023-01-21T09:50:19.722860Z info FLAG: --log_rotate_max_backups="1000"
2023-01-21T09:50:19.722862Z info FLAG: --log_rotate_max_size="104857600"
2023-01-21T09:50:19.722865Z info FLAG: --log_stacktrace_level="default:none"
2023-01-21T09:50:19.722871Z info FLAG: --log_target="[stdout]"
2023-01-21T09:50:19.722874Z info FLAG: --meshConfig="./etc/istio/config/mesh"
2023-01-21T09:50:19.722877Z info FLAG: --outlierLogPath=""
2023-01-21T09:50:19.722880Z info FLAG: --proxyComponentLogLevel="misc:error"
2023-01-21T09:50:19.722882Z info FLAG: --proxyLogLevel="warning"
2023-01-21T09:50:19.722885Z info FLAG: --serviceCluster="istio-proxy"
2023-01-21T09:50:19.722889Z info FLAG: --stsPort="0"
2023-01-21T09:50:19.722891Z info FLAG: --templateFile=""
2023-01-21T09:50:19.722896Z info FLAG: --tokenManagerPlugin="GoogleTokenExchange"
2023-01-21T09:50:19.722904Z info FLAG: --vklog="0"
2023-01-21T09:50:19.722909Z info Version 1.16.1-f6d7bf648e571a6a523210d97bde8b489250354b-Clean
2023-01-21T09:50:19.727010Z info Maximum file descriptors (ulimit -n): 1048576
2023-01-21T09:50:19.727162Z info Proxy role ips=[10.244.3.90] type=router id=istio-ingressgateway-6688c7f65d-9hk2q.istio-system domain=istio-system.svc.cluster.local
2023-01-21T09:50:19.727233Z info Apply mesh config from file accessLogFile: /dev/stdout
defaultConfig:
discoveryAddress: istiod.istio-system.svc:15012
proxyMetadata: {}
tracing:
zipkin:
address: zipkin.istio-system:9411
enablePrometheusMerge: true
extensionProviders:
- envoyOtelAls:
port: 4317
service: opentelemetry-collector.istio-system.svc.cluster.local
name: otel
rootNamespace: istio-system
trustDomain: cluster.local
2023-01-21T09:50:19.732271Z info Effective config: binaryPath: /usr/local/bin/envoy
configPath: ./etc/istio/proxy
controlPlaneAuthPolicy: MUTUAL_TLS
discoveryAddress: istiod.istio-system.svc:15012
drainDuration: 45s
parentShutdownDuration: 60s
proxyAdminPort: 15000
serviceCluster: istio-proxy
statNameLength: 189
statusPort: 15020
terminationDrainDuration: 5s
tracing:
zipkin:
address: zipkin.istio-system:9411
2023-01-21T09:50:19.732321Z info JWT policy is third-party-jwt
2023-01-21T09:50:19.732327Z info using credential fetcher of JWT type in cluster.local trust domain
2023-01-21T09:50:21.732984Z info Workload SDS socket not found. Starting Istio SDS Server
2023-01-21T09:50:21.733019Z info CA Endpoint istiod.istio-system.svc:15012, provider Citadel
2023-01-21T09:50:21.733009Z info Opening status port 15020
2023-01-21T09:50:21.733066Z info Using CA istiod.istio-system.svc:15012 cert with certs: var/run/secrets/istio/root-cert.pem
2023-01-21T09:50:21.733190Z info citadelclient Citadel client using custom root cert: var/run/secrets/istio/root-cert.pem
2023-01-21T09:50:21.752589Z info ads All caches have been synced up in 2.033712613s, marking server ready
2023-01-21T09:50:21.753009Z info xdsproxy Initializing with upstream address "istiod.istio-system.svc:15012" and cluster "Kubernetes"
2023-01-21T09:50:21.753526Z info sds Starting SDS grpc server
2023-01-21T09:50:21.755731Z info starting Http service at 127.0.0.1:15004
2023-01-21T09:50:21.757373Z info Pilot SAN: [istiod.istio-system.svc]
2023-01-21T09:50:21.759150Z info Starting proxy agent
2023-01-21T09:50:21.759203Z info starting
2023-01-21T09:50:21.759262Z info Envoy command: [-c etc/istio/proxy/envoy-rev.json --drain-time-s 45 --drain-strategy immediate --parent-shutdown-time-s 60 --local-address-ip-version v4 --file-flush-interval-msec 1000 --disable-hot-restart --log-format %Y-%m-%dT%T.%fZ %l envoy %n %v -l warning --component-log-level misc:error]
2023-01-21T09:57:35.899133Z warn sds failed to warm certificate: failed to generate workload certificate: create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on 10.96.0.10:53: read udp 10.244.3.90:47480->10.96.0.10:53: i/o timeout"
2023-01-21T09:57:47.742912Z warning envoy config StreamAggregatedResources gRPC config stream to xds-grpc closed since 425s ago: 14, connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc: i/o timeout"
2023-01-21T09:58:24.903150Z warning envoy config StreamAggregatedResources gRPC config stream to xds-grpc closed since 463s ago: 14, connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc: i/o timeout"
2023-01-21T09:58:54.914879Z warn ca ca request failed, starting attempt 1 in 109.434019ms
2023-01-21T09:58:54.915166Z warning envoy config StreamAggregatedResources gRPC config stream to xds-grpc closed since 493s ago: 14, connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on 10.96.0.10:53: read udp 10.244.3.90:32922->10.96.0.10:53: i/o timeout"
2023-01-21T09:58:55.025581Z warn ca ca request failed, starting attempt 2 in 196.977492ms
2023-01-21T09:58:55.223194Z warn ca ca request failed, starting attempt 3 in 395.689636ms
2023-01-21T09:58:55.620020Z warn ca ca request failed, starting attempt 4 in 739.027151ms
2023-01-21T09:58:56.360201Z warn sds failed to warm certificate: failed to generate workload certificate: create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on 10.96.0.10:53: read udp 10.244.3.90:32922->10.96.0.10:53: i/o timeout"
2023-01-21T09:59:44.014538Z warning envoy config StreamAggregatedResources gRPC config stream to xds-grpc closed since 542s ago: 14, connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc: i/o timeout"
2023-01-21T10:00:15.658480Z warn ca ca request failed, starting attempt 1 in 108.563067ms
2023-01-21T10:00:15.768101Z warn ca ca request failed, starting attempt 2 in 213.415014ms
2023-01-21T10:00:15.982769Z warn ca ca request failed, starting attempt 3 in 390.712645ms
2023-01-21T10:00:16.374599Z warn ca ca request failed, starting attempt 4 in 807.591954ms
2023-01-21T10:00:17.182782Z warn sds failed to warm certificate: failed to generate workload certificate: create certificate: rpc error: code = Unavailable desc = connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc on 10.96.0.10:53: read udp 10.244.3.90:32922->10.96.0.10:53: i/o timeout"
2023-01-21T10:00:19.121357Z warning envoy config StreamAggregatedResources gRPC config stream to xds-grpc closed since 577s ago: 14, connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc: i/o timeout"
2023-01-21T10:00:51.189645Z warning envoy config StreamAggregatedResources gRPC config stream to xds-grpc closed since 609s ago: 14, connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc: i/o timeout"
2023-01-21T10:01:37.903048Z warning envoy config StreamAggregatedResources gRPC config stream to xds-grpc closed since 656s ago: 14, connection error: desc = "transport: Error while dialing dial tcp: lookup istiod.istio-system.svc: i/o timeout"