I am using istio 1.1.10 in a 1.13 gke cluster.
Our istio deploy is done via helm.
We are deploying an istio-ingressgateway and we want to listen to 443 requests with cert manager support.
When I execute this command
$ istioctl proxy-status istio-ingressgateway-xxxxx
I see this output
Clusters Match
--- Pilot Listeners
+++ Envoy Listeners
@@ -1,270 +1,9 @@
{
"dynamicActiveListeners": [
- {
- "listener": {
- "name": "0.0.0.0_443",
- "address": {
- "socketAddress": {
- "address": "0.0.0.0",
- "portValue": 443
- }
- },
- "filterChains": [
....
...
..
This means, the envoy configuration is not merge with the pilot one.
Why this could happen?
Also proxy-status output this
istio-ingressgateway-744f98dcd9-67z9t.istio-system SYNCED STALE (Never Acknowledged) SYNCED (99%) SYNCED istio-pilot-6b696c85d7-d74pk 1.1.3