Istio Version: 1.8.1
Am new to istio.
I have istio setup where ServiceEntry is not working as expected. I was using the
ServiceEntry for the purpose of routing the egress traffic back to the istio cluster to a pod/service.
I have host say -
Here is my scenario:
External traffic is working as expected.
When I make a call from
App2 which is in the same cluster(same namespace) which has the URL
https://sample-app.com where I cant change this to service URL of kube for backward compatibility.
https://sample-app.com(Which has to make call to internal VirtualService via ServiceEntry) →
--- # Source: Service Entry --- apiVersion: networking.istio.io/v1alpha3 kind: ServiceEntry metadata: name: external-svc-redirect namespace: app # Use same namespace with backend service spec: hosts: - sample-app.com location: MESH_EXTERNAL ports: - number: 443 name: https protocol: TLS resolution: NONE ... --- # Source: Create virtual service to access internal --- apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: name: internal-routing namespace: app # Use same namespace with backend service spec: hosts: - sample-app.com gateways: - mesh # applies to all the sidecars in the mesh tls: - match: - sniHosts: - sample-app.com route: - destination: host: sample.app.svc.cluster.local # Backend service name port: number: 8084
Steps to reproduce the bug
Version (include the output of
istioctl version --remote and
kubectl version --short and
helm version --short if you used Helm)
$ istioctl version --remote client version: 1.8.1 control plane version: 1.8.1 data plane version: 1.8.1 (33 proxies) $ kubectl version --short Client Version: v1.18.8-eks-7c9bda Server Version: v1.18.9-eks-d1db3c
How was Istio installed?
Environment where the bug was observed (cloud vendor, OS, etc)