-
Bug
-
Resolution: Obsolete
-
Major
-
None
-
maistra-1.1.11
-
None
-
False
-
False
-
Undefined
-
Run a 1.1.11 SMCP MTLS patch command creates two pilot pods in SMCP
Build info:
OCP 4.6
OSSM operator 2.0.1
SMCP 1.1.11
How to reproduce:
1. Install SMCP 1.1.11 CR below:
apiVersion: maistra.io/v2
kind: ServiceMeshControlPlane
metadata:
name: basic-install
namespace: istio-system
spec:
version: v1.1
tracing:
type: Jaeger
sampling: 10000
addons:
jaeger:
install:
storage:
type: Memory
kiali:
enabled: true
grafana:
enabled: true
2. Run a kubectl patch command to enable MTLS
$ kubectl patch -n istio-system smcp.v1.maistra.io/basic-install --type merge -p '{"spec":{"istio":{"global":{"controlPlaneSecurityEnabled":true,"mtls":
}}}}'
3. Wait and see istio-operator restarts all the pods in the istio-system
4. There are two pilot pods and policy , telemetry pod crash.
- is related to
-
MAISTRA-2054 Mutual TLS over HTTPS failed to get response. OpenSSL SSL_read: error:1409445C:SSL routines:ssl3_read_bytes:tlsv13 alert certificate required, errno 0
-
- Closed
-
- relates to
-
MAISTRA-2079 pilot not running and cannot deploy bookinfo after patch SMCP tls specs
-
- Closed
-