AKS ISTIO Gateway is not accessiable-CodePudding

The

# Check the $INGRESS_NAME="istio-ingress" $INGRESS_NS="istio-ingress" kubectl get svc "$INGRESS_NAME" -n "$INGRESS_NS"

it returns the external IP as shown below

However, I am not able to access the application

Also I am getting an error while trying to run the following commands to find the ports

kubectl -n "$INGRESS_NS" get service "$INGRESS_NAME" -o jsonpath='{.spec.ports[?(@.name=="http2")].port}' kubectl -n "$INGRESS_NS" get service "$INGRESS_NAME" -o jsonpath='{.spec.ports[?(@.name=="https")].port}' kubectl -n "$INGRESS_NS" get service "$INGRESS_NAME" -o jsonpath='{.spec.ports[?(@.name=="tcp")].port}'

CodePudding user response：

I tried to reproduce the same in my environment to create Sample Bookinginfo application, as i got same error.

To resolve the application issue, kindly follow the below steps.

Install ISTIO using below cmdlets.

#Prerequisites helm repo add istio https://istio-release.storage.googleapis.com/charts helm repo update #create namespace kubectl create namespace istio-system # helm install istio-base and istiod helm install istio-base istio/base -n istio-system helm install istiod istio/istiod -n istio-system --wait # Check the installation status helm status istiod -n istio-system #create namespace and enable istio-injection for envoy proxy containers kubectl create namespace istio-ingress kubectl label namespace istio-ingress istio-injection=enabled ## helm install istio-ingress for traffic management helm install istio-ingress istio/gateway -n istio-ingress --wait ## Mark the default namespace as istio-injection=enabled kubectl label namespace default istio-injection=enabled #Install the Application kubectl apply -f https://raw.githubusercontent.com/istio/istio/release-1.16/samples/bookinfo/platform/kube/bookinfo.yaml

Check the Services, Pods using below cmdlet.

kubectl get services kubectl get pods

Expose the application to the internet using following command.

kubectl expose svc productpage --type=LoadBalancer --name=productpage-external --port=9080 --target-port=9080

Check the External IP of the service using below command.

kubectl get svc productpage-external

Access the application using External IP and Port in the browser.

Ex url: http://20.121.165.179:9080/productpage

CodePudding user response：

This is because the ingress gateway selector when installed with Helm is istio: ingress, instead of istio: ingressgateway when installed with istioctl.

If you modify the Gateway to reflect this, then it should work:

apiVersion: networking.istio.io/v1beta1 kind: Gateway metadata: name: bookinfo-gateway namespace: default spec: selector: istio: ingress ...

One way to show this (without knowing this issue previously) is with istioctl analyze:

$ istioctl analyze Error [IST0101] (Gateway default/bookinfo-gateway) Referenced selector not found: "istio=ingressgateway" Error: Analyzers found issues when analyzing namespace: default. See https://istio.io/v1.16/docs/reference/config/analysis for more information about causes and resolutions.