Istio 403 response code to AWS 169.254.169.254 host

Networking
1

We are seeing a combination almost 1:1 of 200 and 403 response codes on the Kiali graph to the 169.254.169.254 host. We tried creating a ServiceEntry to the AWS host as follows:

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
name: aws-metadata
spec:
hosts:

  • “metadata.amazon.internal”
    addresses:
  • 169.254.169.254
    ports:
  • number: 80
    name: http
    protocol: HTTP
    resolution: STATIC
    location: MESH_EXTERNAL
    endpoints:
    • address: 169.254.169.254

Any ideas on how to further debug this or find a resolution to the 403 response codes?

2

Was able to get this to work with the following:

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
name: aws-metadata
namespace: istio-system
spec:
hosts:

  • aws.metadata.internal
    addresses:
  • 169.254.169.254
    ports:
  • number: 80
    name: tcp-80
    protocol: tcp
  • number: 443
    name: tcp-443
    protocol: tcp
    location: MESH_EXTERNAL
    resolution: STATIC
    endpoints:
  • address: 169.254.169.254
1 Like