-
Bug
-
Resolution: Duplicate
-
Major
-
None
-
maistra-1.1.11
-
None
-
None
-
False
-
False
-
Undefined
-
Mutual TLS over HTTPS failed to get response. OpenSSL SSL_read: error:1409445C:SSL routines:ssl3_read_bytes:tlsv13 alert certificate required, errno 0
task: https://istio.io/v1.4/docs/tasks/security/authentication/https-overlay/
Build Info:
OCP 4.6.6 aws OVNKubernetes network
OSSM istio operator 2.0.1 from brew.registry.redhat.io/rh-osbs/iib:32767
SMCP v1.1.11
How to reproduce:
1. Install OSSM 2.0.1 operators and create a v1.1.11 SMCP
2. Create bookinfo ns and add it into a SMMR
3. oc adm policy add-scc-to-user anyuid -z default -n bookinfo
4. Follow
task: https://istio.io/v1.4/docs/tasks/security/authentication/https-overlay/
- Generate certificates and configmap
- Deploy an HTTPS service without the Istio sidecar
- kubectl exec -it $(kubectl get pod -l app=sleep -o jsonpath=
{.items..metadata.name}
) -c istio-proxy /bin/bash
curl https://my-nginx -k
and see
bash-4.4$ curl https://my-nginx -k
curl: (56) OpenSSL SSL_read: error:1409445C:SSL routines:ssl3_read_bytes:tlsv13 alert certificate required, errno 0
Expected result:
curl nginx should return <h1>Welcome to nginx!</h1>
- relates to
-
MAISTRA-2053 Error processing component security: Internal error occurred: failed calling webhook \"pilot.validation.istio.io\ after upgrading from 2.0.0 to 2.0.1
- Closed
-
MAISTRA-2056 1.1.11 SMCP MTLS patch causes OVN failure, creates two pilot pods in SMCP
- Closed