-
Bug
-
Resolution: Won't Do
-
Major
-
None
-
None
-
None
OSSM 1.1.0 build egress Wildcard configuration for arbitrary domains is not working
Reference [1]: https://archive.istio.io/v1.4/docs/tasks/traffic-management/egress/wildcard-egress-hosts/#wildcard-configuration-for-arbitrary-domains
When we follow the Egress using Wildcard Hosts task[1] and test our ossm 1.1 build on OCP4.3 , the setup egress gateway with SNI proxy is not working.
After editing our SMCP in istio-system, I am getting :
istio-egressgateway-with-sni-proxy pod CrashLoopBackOff
sni-proxy container log:
2020/03/19 14:33:13 [warn] 1#1: the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /etc/nginx/nginx.conf:1
nginx: [warn] the "user" directive makes sense only if the master process runs with super-user privileges, ignored in /etc/nginx/nginx.conf:1
2020/03/19 14:33:13 [emerg] 1#1: open() "/var/run/nginx.pid" failed (13: Permission denied)
nginx: [emerg] open() "/var/run/nginx.pid" failed (13: Permission denied)
Build info:
OCP 4.3.5 AWS
OSSM build: latest-1.1-qe
SMCP installed in istio-system with basic-install CR
How to produce:
https://archive.istio.io/v1.4/docs/tasks/traffic-management/egress/wildcard-egress-hosts/#wildcard-configuration-for-arbitrary-domains
We edit the SMCP/basic install instead of running istioctl command
Function Impact:
egress Wildcard configuration for arbitrary domains is not working