Openshift acces to sidecar injected project from istio unmanaged namespace


We use Openshift 4.2 and ServiceMesh 1.1.1. We have one namespace because of application restriction, We can not add this namespace to Member of istio-system. But We have to access from this name space to istio managed services which binding to pod use istio sidecar.

for example, A namespace is not member of istio-system. B namespace is member of istio-system and P pod in deployed to B namespace and istio-sidecar injected. P-svc service listening 80 port for redirecting request to 8080 port on P pod. When I try to curl command from container in A namespace to P-svc service in B namespace

curl -v http://P-svc.B.svc.cluster.local/actuator/prometheus
About to connect() to P-svc.B.svc.cluster.local port 80 (#0)

  • Trying 172.X.X.X…

  • Connected to P-svc.B.svc.cluster.local(172.X.X.X) port 80 (#0)

GET /actuator/prometheus HTTP/1.1

User-Agent: curl/7.29.0

Host: P-svc.B
Accept: /

  • Recv failure: Connection reset by peer
  • Closing connection 0
    curl: (56) Recv failur: Connection reset by peer

How can I access to P-svc from A namespace ?

Thank you and Regards