Primary-primary Multicluster setup not working in EKS

[ramanarayanan-ravi]

Hi Istio Community,

I have been trying to install istio for multicluster (primary-primary) setup.

Install Multi-Primary

While doing so, everything happens except Verifying Cross-Cluster Traffic step.

The command at the last returns the same cluster output and toggle between v1 and v2 not happening.

Could anyone help on this?

Regards,
Ramanarayanan

[Nahidul_Kibria]

Same here I’m getting "upstream connect error or disconnect/reset before headers. reset reason: local reset " Only the version worked in the same cluster. How to debug?

All pod gateway everything looks normal, here is my “istioctl proxy-status” Any clue help is appreciated.

[ramanarayanan-ravi]

@Nahidul_Kibria, I’m also getting the same error

[Nahidul_Kibria]

I’m not sure what we are missing, I will try one more time and let you know @ramanarayanan-ravi also can work together in a zoom call if you want, I’m in GMT+7 timezone. This is a cool feature to have and explore.

[ramanarayanan-ravi]

Hi @Nahidul_Kibria ,
Have you tried one more time?
I’m in GMT +5.30 timezone

[btsitelashvili]

I have similar problems with multucluster setup on AWS EKS

Istio 1.8 multicluster multi-primary different networks on-premise-->AWS does not work

[mcouthon]

Have you generated common root CA certs? In my experience, this was one of the things that tripped me.

FWIW, I was able to make the verification work in 1.8 on EKS.

[Nahidul_Kibria]

This is a good clue, I do following the root CA certs installation, I tried “Install Multi Primary on different networks” However I always get a response from the service installed in the same cluster.

Any clue how to debug? I do not find anything in gateway logs.