Istioctl 1.7.0 port-forward issue

1

Hi,

After installing istioctl in 1.7.0 on my Mac OS X, I can see something like this when I want to change Istio version:

$ istioctl version
3 errors occurred:
	* error port-forewarding into istiod-54bc7996c7-65hsn : the server is currently unable to handle the request (get pods istiod-54bc7996c7-65hsn:15014)
	* error port-forewarding into istiod-54bc7996c7-q5vph : the server is currently unable to handle the request (get pods istiod-54bc7996c7-q5vph:15014)
	* error port-forewarding into istiod-54bc7996c7-zhwg5 : the server is currently unable to handle the request (get pods istiod-54bc7996c7-zhwg5:15014)


1.7.0

I have Istio control plane in version 1.6.7:

$ kubectl -n istio-system get istiooperator installed-state -o json | jq .spec.tag
"1.6.7"

Cheers,
Pawel

2

I opened port 15014 in the firewall in GCP and it works now. It is also worth mentioning to open 8080, otherwise istioctl proxy-status won’t work.

I found this doc page quite useful with the description of the control plane ports: https://istio.io/latest/docs/ops/deployment/requirements/#ports-used-by-istio

3

Why is it that 15014 needs to be open, do you understand that. I do not follow what happens behind the scene.

What is source and destination of this rule?

4

According to the table, 15014 is the Istiod port.