-
Bug
-
Resolution: Won't Do
-
Major
-
None
-
OSSM 2.0.0
-
False
-
False
-
Documentation (Ref Guide, User Guide, etc.), Release Notes
-
+
-
Undefined
-
I have a gateway definition with this spec:
spec:
selector:
istio: ingressgateway
servers:
- hosts:
- app-1.mesh.apps.ocp.scalelab
- app-2.mesh.apps.ocp.scalelab
port:
name: https
number: 443
protocol: HTTPS
tls:
mode: SIMPLE
privateKey: /etc/istio/ingressgateway-certs/tls.key
serverCertificate: /etc/istio/ingressgateway-certs/tls.crt
- hosts:
- app-1.mesh.apps.ocp.scalelab
- app-2.mesh.apps.ocp.scalelab
port:
name: http
number: 80
protocol: HTTP
tls:
httpsRedirect: true
This generates duplicate routes:
[root@f24-h16-000-r630 01BE]# oc get route -o wide NAME HOST/PORT PATH SERVICES PORT TERMINATION WILDCARD istio-ingressgateway istio-ingressgateway-mesh-control-plane.apps.ocp.scalelab istio-ingressgateway 8080 None mesh-scale-app-gateway-29kwr app-1.mesh.apps.ocp.scalelab istio-ingressgateway https passthrough None mesh-scale-app-gateway-fcrlv HostAlreadyClaimed istio-ingressgateway https passthrough None mesh-scale-app-gateway-lpvsx HostAlreadyClaimed istio-ingressgateway https passthrough None mesh-scale-app-gateway-p4bnh app-2.mesh.apps.ocp.scalelab istio-ingressgateway https passthrough None
A look into YAML shows that the routes to the same host are identical. I believe this might be due to using the same host for HTTP and HTTPS. There is no HTTP route that would redirect to HTTPS.
- is related to
-
-
- Closed
-
-
OSSM-1689 Simplify IOR
-
- Closed
-
