Comments (2)
2024-04-07T15:01:05.918565Z warn serverca impersonation failed for identity spiffe://cluster.local/ns/echo-1-71231/sa/uncaptured, error: no instances of "echo-1-71231/uncaptured" found on node "istio-testing-worker" client=10.244.135.132:57380
2024-04-07T15:01:34.002311Z WARN proxy{�[3muid�[0m�[2m=�[0mf38d0779-85dc-4f96-bb3e-636840cd3666}: ztunnel::proxy::inbound_passthrough: proxying failed: identity error: signing gRPC error (The request does not have valid authentication credentials): request impersonation authentication failure source=10.244.128.73:58540 component="inbound plaintext"
Are we still trying to hairpin and get the identity of the source? Why does this only impact calico -- is it a quirk in the scheduling somehow that triggers it on calico?
from istio.
Are we still trying to hairpin and get the identity of the source? Why does this only impact calico -- is it a quirk in the scheduling somehow that triggers it on calico?
Weird. No idea why this would be A) random B) only show up with calico.
from istio.
Related Issues (20)
- Use the ISTIO_MULTIROOT_MESH to rotate root certificates
- Implicit allow from waypoint HOT 1
- Ambient: Envoy clients do not respect a pod dynamically enrolling/leaving "ambient enabled"
- TestNodeUntainterOnlyUntaintsWhenIstiocniInourNs test flake
- TestTraffic/virtualservice test flake
- Istio update from 1.19.6 to 1.20.5 multi-cluster TLS Error HOT 2
- gRPC request how to get request body in envoyfilter HOT 3
- Write a VAP for Istio annotations and labels HOT 2
- Change in behavior of ServiceEntries merge HOT 22
- Enrich the debug API to dump the configuration from configStore HOT 2
- Unexpected matchlabels added
- Istio merges non-Istio conditions into the Istio-controlled status stanzas of HTTPRoutes
- Add a flag to be able to increase the timeout in retries for the integration test
- Incomplete CDS response cause cluster_not_found error during xds update HOT 8
- helm install base output message can be improved HOT 2
- Improve message from helm install istiod on next step HOT 1
- PILOT_ENABLE_STATUS won't take effect if it is set without PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING HOT 3
- Intermittent Routing Failure for VirtualService HOT 3
- AuthorizationPolicy is allowing to use Prefix, Suffix match together in rules.from.source.principals HOT 4
- Add feature flag to disable default retry policy HOT 9
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from istio.