Uploaded image for project: 'Maistra'
  1. Maistra
  2. MAISTRA-1283

OSSM 1.1.0 build egress Wildcard configuration for arbitrary domains is not working

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Major Major
    • None
    • None
    • proxy
    • None

      OSSM 1.1.0 build egress Wildcard configuration for arbitrary domains is not working

      Reference [1]: https://archive.istio.io/v1.4/docs/tasks/traffic-management/egress/wildcard-egress-hosts/#wildcard-configuration-for-arbitrary-domains

      When we follow the Egress using Wildcard Hosts task[1] and test our ossm 1.1 build on OCP4.3 , the setup egress gateway with SNI proxy is not working.
      After editing our SMCP in istio-system, I am getting :
      istio-egressgateway-with-sni-proxy pod CrashLoopBackOff
      sni-proxy container log:

      2020/03/19 14:33:13 [warn] 1#1: the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /etc/nginx/nginx.conf:1
      nginx: [warn] the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /etc/nginx/nginx.conf:1
      2020/03/19 14:33:13 [emerg] 1#1: open() "/var/run/nginx.pid" failed (13: Permission denied)
      nginx: [emerg] open() "/var/run/nginx.pid" failed (13: Permission denied)

      Build info:
      OCP 4.3.5 AWS
      OSSM build: latest-1.1-qe
      SMCP installed in istio-system with basic-install CR

      How to produce:
      https://archive.istio.io/v1.4/docs/tasks/traffic-management/egress/wildcard-egress-hosts/#wildcard-configuration-for-arbitrary-domains

      We edit the SMCP/basic install instead of running istioctl command

      Function Impact:
      egress Wildcard configuration for arbitrary domains is not working

              yuaxu@redhat.com Yuanlin Xu
              yuaxu@redhat.com Yuanlin Xu
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: