Openshift acces to sidecar injected project from istio unmanaged namespace

Networking
1

Hi,

We use Openshift 4.2 and ServiceMesh 1.1.1. We have one namespace because of application restriction, We can not add this namespace to Member of istio-system. But We have to access from this name space to istio managed services which binding to pod use istio sidecar.

for example, A namespace is not member of istio-system. B namespace is member of istio-system and P pod in deployed to B namespace and istio-sidecar injected. P-svc service listening 80 port for redirecting request to 8080 port on P pod. When I try to curl command from container in A namespace to P-svc service in B namespace

curl -v http://P-svc.B.svc.cluster.local/actuator/prometheus
About to connect() to P-svc.B.svc.cluster.local port 80 (#0)

  • Trying 172.X.X.X…

  • Connected to P-svc.B.svc.cluster.local(172.X.X.X) port 80 (#0)

GET /actuator/prometheus HTTP/1.1

User-Agent: curl/7.29.0

Host: P-svc.B
Accept: /

  • Recv failure: Connection reset by peer
  • Closing connection 0
    curl: (56) Recv failur: Connection reset by peer

How can I access to P-svc from A namespace ?

Thank you and Regards
Teo