exec: [go test -json -tags=integ -timeout 180m ./tests/integration/telemetry/policy -args -istio.test.skipWorkloads=tproxy,vm -istio.test.openshift -istio.test.kube.helm.values=global.platform=openshift -istio.test.istio.enableCNI=true -istio.test.ci=true -istio.test.env=kube -istio.test.kube.deploy=false -istio.test.stableNamespaces=true -istio.test.kube.deployGatewayAPI=true -istio.test.gatewayConformance.maxTimeToConsistency=180s -istio.test.work_dir=/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts] go test pid: 4113210 2025-08-01T13:31:43.482943Z warn unable to resolve TARGET_OUT. Dir /root/afsan/istio/out/linux_ppc64le does not exist 2025-08-01T13:31:43.483009Z warn unable to resolve LOCAL_OUT. Dir /root/afsan/istio/out/linux_ppc64le does not exist 2025-08-01T13:31:43.514716Z info tf === Test Framework Settings === 2025-08-01T13:31:43.514794Z info tf TestID: telemetry_policy RunID: 35ebff5f-46c0-4599-8c8f-e17552760632 NoCleanup: false BaseDir: /home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts Selector: FailOnDeprecation: false CIMode: true Retries: 0 StableNamespaces: true Revision: SkipWorkloads [tproxy vm] Compatibility: false Revisions: Hub: quay.io/maistra Tag: ibm-p Variant: PullPolicy: Always PullSecret: MaxDumps: 10 HelmRepo: https://istio-release.storage.googleapis.com/charts IPFamilies: [] GatewayConformanceStandardOnly: false GatewayConformanceAllowCRDsMismatch: false 2025-08-01T13:31:43.514799Z info tf =============================== 2025-08-01T13:31:43.516722Z info tf Test run dir: /home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-35ebff5f46c045 2025-08-01T13:31:43.516835Z info tf Test Framework Kubernetes environment Settings: Kubeconfigs: [] LoadBalancerSupported: true MCSControllerEnabled: false ControlPlaneTopology: map[] NetworkTopology: map[] ConfigTopology: map[] 2025-08-01T13:31:43.516855Z info tf Flags istio.test.kube.config and istio.test.kube.topology not specified. 2025-08-01T13:31:43.516879Z info tf Using KubeConfigs: [/root/upi/cO/auth/kubeconfig]. 2025-08-01T13:31:43.516888Z info tf === BEGIN: Building clusters === 2025-08-01T13:31:43.521229Z info tf Built Cluster: Name: cluster-0 StableName: primary-0 PrimaryCluster: cluster-0 ConfigCluster: cluster-0 Network: HTTPProxy: ProxyKubectlOnly: false Filename: /root/upi/cO/auth/kubeconfig 2025-08-01T13:31:43.521242Z info tf === DONE: Building clusters === 2025-08-01T13:31:43.521271Z info tf === BEGIN: Setup: 'telemetry_policy' === 2025-08-01T13:31:43.521302Z info tf === BEGIN: Deploy Istio [Suite=telemetry_policy] === 2025-08-01T13:31:43.521311Z info tf === Istio Component Config === 2025-08-01T13:31:43.521356Z info tf SystemNamespace: istio-system TelemetryNamespace: istio-system DeployIstio: false DeployEastWestGW: true Values: map[global.hub:quay.io/maistra global.imagePullPolicy:Always global.platform:openshift global.tag:ibm-p global.variant:] PrimaryClusterIOPFile: tests/integration/iop-integration-test-defaults.yaml ConfigClusterIOPFile: tests/integration/iop-integration-test-defaults.yaml RemoteClusterIOPFile: tests/integration/iop-remote-integration-test-defaults.yaml BaseIOPFile: tests/integration/base.yaml SkipWaitForValidationWebhook: false DumpKubernetesManifests: false IstiodlessRemotes: true OperatorOptions: map[] EnableCNI: true IngressGatewayServiceName: IngressGatewayServiceNamespace: IngressGatewayIstioLabel: EgressGatewayServiceName: istio-egressgateway EgressGatewayServiceNamespace: istio-system EgressGatewayIstioLabel: egressgateway SharedMeshConfigName: ControlPlaneInstaller: 2025-08-01T13:31:43.521363Z info tf ================================ 2025-08-01T13:31:43.525333Z info tf skipping deployment as specified in the config 2025-08-01T13:31:43.525352Z info tf === SUCCEEDED: Deploy Istio in 4.045041ms [Suite=telemetry_policy]=== 2025-08-01T13:31:43.525359Z info tf === BEGIN: Create namespace istio-echo === 2025-08-01T13:31:43.546387Z info tf === SUCCEEDED: Create namespace istio-echo in 21.019698ms === 2025-08-01T13:31:43.585486Z info tf === BEGIN: Deploy echo instances === 2025-08-01T13:31:43.708371Z info klog Waiting for caches to sync controller=echo 2025-08-01T13:31:43.713680Z info klog Waiting for caches to sync controller=echo 2025-08-01T13:31:43.808618Z info klog Caches are synced controller=echo 2025-08-01T13:31:43.814305Z info klog Caches are synced controller=echo 2025-08-01T13:31:56.524365Z info tf === SUCCEEDED: Deploy echo instances in 12.938874265s === 2025-08-01T13:31:56.524481Z info tf === BEGIN: Create namespace istio-ratelimit === 2025-08-01T13:31:56.539588Z info tf === SUCCEEDED: Create namespace istio-ratelimit in 15.098434ms === 2025-08-01T13:31:56.706484Z info tf Checking pods ready... 2025-08-01T13:31:56.706540Z info tf Checking pods ready... 2025-08-01T13:31:56.712052Z info tf [ 0] redis-d988cb57b-5hmjs Pending (Pending) 2025-08-01T13:31:56.912459Z info tf Checking pods ready... 2025-08-01T13:31:56.912504Z info tf Checking pods ready... 2025-08-01T13:31:56.940862Z info tf [ 0] redis-d988cb57b-5hmjs Pending (Pending) 2025-08-01T13:31:57.341299Z info tf Checking pods ready... 2025-08-01T13:31:57.341350Z info tf Checking pods ready... 2025-08-01T13:31:57.345891Z info tf [ 0] redis-d988cb57b-5hmjs Pending (Pending) 2025-08-01T13:31:58.146549Z info tf Checking pods ready... 2025-08-01T13:31:58.146644Z info tf Checking pods ready... 2025-08-01T13:31:58.150671Z info tf [ 0] redis-d988cb57b-5hmjs Pending (Pending) 2025-08-01T13:31:59.751460Z info tf Checking pods ready... 2025-08-01T13:31:59.751500Z info tf Checking pods ready... 2025-08-01T13:31:59.756051Z info tf [ 0] redis-d988cb57b-5hmjs Pending (Pending) 2025-08-01T13:32:02.957108Z info tf Checking pods ready... 2025-08-01T13:32:02.957159Z info tf Checking pods ready... 2025-08-01T13:32:02.961382Z info tf [ 0] redis-d988cb57b-5hmjs Pending (Pending) 2025-08-01T13:32:06.162395Z info tf Checking pods ready... 2025-08-01T13:32:06.162450Z info tf Checking pods ready... 2025-08-01T13:32:06.166340Z info tf [ 0] redis-d988cb57b-5hmjs Running (Ready) 2025-08-01T13:32:06.166365Z info tf Checking pods ready... 2025-08-01T13:32:06.166373Z info tf Checking pods ready... 2025-08-01T13:32:06.169212Z info tf [ 0] ratelimit-8544cc7cf8-h6255 Running (container not ready: 'ratelimit') 2025-08-01T13:32:06.370340Z info tf Checking pods ready... 2025-08-01T13:32:06.370382Z info tf Checking pods ready... 2025-08-01T13:32:06.374283Z info tf [ 0] ratelimit-8544cc7cf8-h6255 Running (container not ready: 'ratelimit') 2025-08-01T13:32:06.775113Z info tf Checking pods ready... 2025-08-01T13:32:06.775153Z info tf Checking pods ready... 2025-08-01T13:32:06.779658Z info tf [ 0] ratelimit-8544cc7cf8-h6255 Running (Ready) 2025-08-01T13:32:06.872013Z info tf Checking pods ready... 2025-08-01T13:32:06.872178Z info tf Checking pods ready... 2025-08-01T13:32:06.880445Z info tf Failed retrieving pods: no matching pod found for selectors: [app.kubernetes.io/name=prometheus] 2025-08-01T13:32:07.081226Z info tf Checking pods ready... 2025-08-01T13:32:07.081272Z info tf Checking pods ready... 2025-08-01T13:32:07.099277Z info tf [ 0] prometheus-689cc795d4-7mwqb Pending (Pending) 2025-08-01T13:32:07.499868Z info tf Checking pods ready... 2025-08-01T13:32:07.499941Z info tf Checking pods ready... 2025-08-01T13:32:07.504986Z info tf [ 0] prometheus-689cc795d4-7mwqb Pending (Pending) 2025-08-01T13:32:08.305928Z info tf Checking pods ready... 2025-08-01T13:32:08.306007Z info tf Checking pods ready... 2025-08-01T13:32:08.310461Z info tf [ 0] prometheus-689cc795d4-7mwqb Pending (Pending) 2025-08-01T13:32:09.911367Z info tf Checking pods ready... 2025-08-01T13:32:09.911395Z info tf Checking pods ready... 2025-08-01T13:32:09.915040Z info tf [ 0] prometheus-689cc795d4-7mwqb Pending (Pending) 2025-08-01T13:32:13.115379Z info tf Checking pods ready... 2025-08-01T13:32:13.115417Z info tf Checking pods ready... 2025-08-01T13:32:13.119808Z info tf [ 0] prometheus-689cc795d4-7mwqb Running (Ready) 2025-08-01T13:32:13.156306Z info tf === DONE: Setup: 'telemetry_policy' (29.635022617s) === 2025-08-01T13:32:13.156362Z info tf === BEGIN: Test Run: 'telemetry_policy' === PASS tests/integration/telemetry/policy.TestRateLimiting (1.26s) PASS tests/integration/telemetry/policy.TestLocalRateLimiting (0.04s) PASS tests/integration/telemetry/policy.TestLocalRouteSpecificRateLimiting (0.03s) PASS tests/integration/telemetry/policy.TestLocalRateLimitingServiceAccount (0.05s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/HTTP_Traffic (5.07s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/HTTP_H2_Traffic (0.04s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/HTTPS_Traffic (5.07s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/HTTPS_Traffic_Conflict (0.06s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/HTTPS_H2_Traffic (0.05s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/HTTPS_H2_Traffic_Conflict (0.07s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/HTTP_Traffic_Egress (5.11s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/HTTP_H2_Traffic_Egress (0.05s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/TCP (0.03s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny/TCP_Conflict (0.03s) PASS tests/integration/telemetry/policy.TestOutboundTrafficPolicy_AllowAny (25.52s) === RUN TestOutboundTrafficPolicy_RegistryOnly 2025-08-01T13:32:40.052874Z info tf === BEGIN: Test: 'telemetry_policy[TestOutboundTrafficPolicy_RegistryOnly]' === 2025-08-01T13:32:40.052949Z info tf === BEGIN: Create namespace app === 2025-08-01T13:32:40.059310Z info tf === SUCCEEDED: Create namespace app in 6.34682ms === 2025-08-01T13:32:40.059354Z info tf === BEGIN: Create namespace service === 2025-08-01T13:32:40.064774Z info tf === SUCCEEDED: Create namespace service in 5.418016ms === helper_test.go:184: failed to apply service entries: failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-35ebff5f46c045/TestOutboundTrafficPolicy_RegistryOnly/_test_context/Sidecar.3114539112.yaml] to ns app in cluster cluster-0: apply: patch: sidecars.networking.istio.io "restrict-to-service-entry-namespace" is forbidden: unable to create new content in namespace app because it is being terminated 2025-08-01T13:32:40.098529Z info tf === BEGIN: Deploy echo instances === 2025-08-01T13:32:40.138391Z info klog Waiting for caches to sync controller=echo 2025-08-01T13:32:40.144660Z info klog Waiting for caches to sync controller=echo 2025-08-01T13:32:40.238852Z info klog Caches are synced controller=echo 2025-08-01T13:32:40.245092Z info klog Caches are synced controller=echo 2025-08-01T13:32:40.247833Z info tf === SUCCEEDED: Deploy echo instances in 149.303239ms === helper_test.go:254: failed to apply service entries: failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-35ebff5f46c045/TestOutboundTrafficPolicy_RegistryOnly/_test_context/ServiceEntry.2120844419.yaml] to ns service in cluster cluster-0: apply: patch: serviceentries.networking.istio.io "http" is forbidden: unable to create new content in namespace service because it is being terminated helper_test.go:254: failed to apply gateway: failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-35ebff5f46c045/TestOutboundTrafficPolicy_RegistryOnly/_test_context/Gateway-VirtualService-ServiceEntry.3943954967.yaml] to ns service in cluster cluster-0: apply: patch: gateways.networking.istio.io "istio-egressgateway" is forbidden: unable to create new content in namespace service because it is being terminated. template: apiVersion: networking.istio.io/v1 kind: Gateway metadata: name: istio-egressgateway spec: selector: istio: egressgateway servers: - port: number: 80 name: http protocol: HTTP hosts: - "some-external-site.com" --- apiVersion: networking.istio.io/v1 kind: VirtualService metadata: name: route-via-egressgateway spec: hosts: - "some-external-site.com" gateways: - istio-egressgateway - mesh http: - match: - gateways: - mesh # from sidecars, route to egress gateway service port: 80 route: - destination: host: istio-egressgateway.istio-system.svc.cluster.local port: number: 80 weight: 100 - match: - gateways: - istio-egressgateway port: 80 route: - destination: host: some-external-site.com headers: request: add: handled-by-egress-gateway: "true" --- apiVersion: networking.istio.io/v1 kind: ServiceEntry metadata: name: ext-service-entry spec: hosts: - "some-external-site.com" location: MESH_EXTERNAL endpoints: - address: destination.app.svc.cluster.local network: external ports: - number: 80 name: http resolution: DNS 2025-08-01T13:32:40.261062Z info tf === DONE (failed): Test: 'telemetry_policy[TestOutboundTrafficPolicy_RegistryOnly] (208.184208ms)' === 2025-08-01T13:32:40.261158Z error tf === Dumping Namespace istio-ratelimit State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:40.261199Z error tf === Dumping Namespace istio-echo State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:40.261196Z error tf === Dumping Istio Deployment State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:40.547843Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:40Z/14704a3080-c689-4884-b576-e5f6c7ce52c9 2025-08-01T13:32:40.548010Z info tf istioctl ([x internal-debug --all mcsz]): completed after 0.2865s 2025-08-01T13:32:40.548769Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:40.658327Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:40Z/14baab21e5-0d9c-4146-b6fc-5392538cfd79 2025-08-01T13:32:40.658653Z info tf istioctl ([x internal-debug --all configz]): completed after 0.3971s 2025-08-01T13:32:40.659203Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:40.773827Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:40Z/14b6a5a807-8fa0-455a-b4e7-9095787b1807 2025-08-01T13:32:40.773938Z info tf istioctl ([x internal-debug --all clusterz]): completed after 0.5123s 2025-08-01T13:32:40.774776Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:41.472474Z error tf === Dumping Namespace service State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:41.472485Z error tf === Dumping Namespace app State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:42.588987Z warn tf cluster/pod cluster-0/app/client-v1-b45b6bf85-vvntc found warming resources (dynamic_warming_clusters) on attempt 1 --- FAIL: TestOutboundTrafficPolicy_RegistryOnly (4.63s) FAIL tests/integration/telemetry/policy.TestOutboundTrafficPolicy_RegistryOnly (4.63s) 2025-08-01T13:32:44.681863Z info tf === FAILED: Test Run: 'telemetry_policy' (exitCode: 1) === 2025-08-01T13:32:44.681940Z info tf === Suite "telemetry_policy" run time: 1m1.160678271s === 2025-08-01T13:32:44.681956Z info tf Wrote trace to /home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/trace.yaml 2025-08-01T13:32:44.683257Z error tf === Dumping Namespace istio-ratelimit State for [suite(telemetry_policy)]... 2025-08-01T13:32:44.683266Z error tf === Dumping Istio Deployment State for [suite(telemetry_policy)]... 2025-08-01T13:32:44.683284Z error tf === Dumping Namespace istio-echo State for [suite(telemetry_policy)]... 2025-08-01T13:32:44.902870Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:40Z/1463fa9051-281d-424c-9619-199041780c86 2025-08-01T13:32:44.903002Z info tf istioctl ([x internal-debug --all mcsz]): completed after 0.2195s 2025-08-01T13:32:44.903832Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:45.064130Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:40Z/14e627c63d-e9c9-42ec-bffc-7f8eb844e36f 2025-08-01T13:32:45.064649Z info tf istioctl ([x internal-debug --all configz]): completed after 0.3811s 2025-08-01T13:32:45.065149Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:45.318568Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:40Z/14d5e744d3-7279-489e-aee7-4e5e03393b4f 2025-08-01T13:32:45.318813Z info tf istioctl ([x internal-debug --all clusterz]): completed after 0.6352s 2025-08-01T13:32:45.319619Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:46.174520Z info tf === BEGIN: Cleanup Istio [Suite=telemetry_policy] === 2025-08-01T13:32:46.174637Z info tf === SUCCEEDED: Cleanup Istio in 108.392µs [Suite=telemetry_policy] === FAIL tests/integration/telemetry/policy DONE 16 tests, 1 failure in 75.619s exec: [go test -json -test.run=^TestOutboundTrafficPolicy_RegistryOnly$ -tags=integ -timeout 180m istio.io/istio/tests/integration/telemetry/policy -args -istio.test.skipWorkloads=tproxy,vm -istio.test.openshift -istio.test.kube.helm.values=global.platform=openshift -istio.test.istio.enableCNI=true -istio.test.ci=true -istio.test.env=kube -istio.test.kube.deploy=false -istio.test.stableNamespaces=true -istio.test.kube.deployGatewayAPI=true -istio.test.gatewayConformance.maxTimeToConsistency=180s -istio.test.work_dir=/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts] go test pid: 4114683 2025-08-01T13:32:57.036449Z warn unable to resolve TARGET_OUT. Dir /root/afsan/istio/out/linux_ppc64le does not exist 2025-08-01T13:32:57.036543Z warn unable to resolve LOCAL_OUT. Dir /root/afsan/istio/out/linux_ppc64le does not exist 2025-08-01T13:32:57.078275Z info tf === Test Framework Settings === 2025-08-01T13:32:57.078413Z info tf TestID: telemetry_policy RunID: 7c16c963-5667-4801-bdf2-b7bb847ff336 NoCleanup: false BaseDir: /home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts Selector: FailOnDeprecation: false CIMode: true Retries: 0 StableNamespaces: true Revision: SkipWorkloads [tproxy vm] Compatibility: false Revisions: Hub: quay.io/maistra Tag: ibm-p Variant: PullPolicy: Always PullSecret: MaxDumps: 10 HelmRepo: https://istio-release.storage.googleapis.com/charts IPFamilies: [] GatewayConformanceStandardOnly: false GatewayConformanceAllowCRDsMismatch: false 2025-08-01T13:32:57.078422Z info tf =============================== 2025-08-01T13:32:57.078649Z info tf Test run dir: /home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-7c16c963566748 2025-08-01T13:32:57.078779Z info tf Test Framework Kubernetes environment Settings: Kubeconfigs: [] LoadBalancerSupported: true MCSControllerEnabled: false ControlPlaneTopology: map[] NetworkTopology: map[] ConfigTopology: map[] 2025-08-01T13:32:57.078798Z info tf Flags istio.test.kube.config and istio.test.kube.topology not specified. 2025-08-01T13:32:57.078822Z info tf Using KubeConfigs: [/root/upi/cO/auth/kubeconfig]. 2025-08-01T13:32:57.078834Z info tf === BEGIN: Building clusters === 2025-08-01T13:32:57.083682Z info tf Built Cluster: Name: cluster-0 StableName: primary-0 PrimaryCluster: cluster-0 ConfigCluster: cluster-0 Network: HTTPProxy: ProxyKubectlOnly: false Filename: /root/upi/cO/auth/kubeconfig 2025-08-01T13:32:57.083692Z info tf === DONE: Building clusters === 2025-08-01T13:32:57.083721Z info tf === BEGIN: Setup: 'telemetry_policy' === 2025-08-01T13:32:57.083751Z info tf === BEGIN: Deploy Istio [Suite=telemetry_policy] === 2025-08-01T13:32:57.083760Z info tf === Istio Component Config === 2025-08-01T13:32:57.083800Z info tf SystemNamespace: istio-system TelemetryNamespace: istio-system DeployIstio: false DeployEastWestGW: true Values: map[global.hub:quay.io/maistra global.imagePullPolicy:Always global.platform:openshift global.tag:ibm-p global.variant:] PrimaryClusterIOPFile: tests/integration/iop-integration-test-defaults.yaml ConfigClusterIOPFile: tests/integration/iop-integration-test-defaults.yaml RemoteClusterIOPFile: tests/integration/iop-remote-integration-test-defaults.yaml BaseIOPFile: tests/integration/base.yaml SkipWaitForValidationWebhook: false DumpKubernetesManifests: false IstiodlessRemotes: true OperatorOptions: map[] EnableCNI: true IngressGatewayServiceName: IngressGatewayServiceNamespace: IngressGatewayIstioLabel: EgressGatewayServiceName: istio-egressgateway EgressGatewayServiceNamespace: istio-system EgressGatewayIstioLabel: egressgateway SharedMeshConfigName: ControlPlaneInstaller: 2025-08-01T13:32:57.083806Z info tf ================================ 2025-08-01T13:32:57.089313Z info tf skipping deployment as specified in the config 2025-08-01T13:32:57.089386Z info tf === SUCCEEDED: Deploy Istio in 5.623987ms [Suite=telemetry_policy]=== 2025-08-01T13:32:57.089400Z info tf === BEGIN: Create namespace istio-echo === 2025-08-01T13:32:57.103526Z info tf === SUCCEEDED: Create namespace istio-echo in 14.121569ms === 2025-08-01T13:32:57.128860Z info tf === BEGIN: Deploy echo instances === 2025-08-01T13:32:57.136091Z error tf === FAILED: Deploy echo instances === 2025-08-01T13:32:57.136125Z error tf failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-7c16c963566748/_suite_context/ServiceAccount-Service.4204683110.yaml] to ns istio-echo in cluster cluster-0: apply: patch: serviceaccounts "clt" is forbidden: unable to create new content in namespace istio-echo because it is being terminated 2025-08-01T13:32:57.136171Z error tf === Dumping Namespace istio-echo State for [suite(telemetry_policy)]... 2025-08-01T13:32:57.136193Z error tf === Dumping Istio Deployment State for [suite(telemetry_policy)]... 2025-08-01T13:32:57.223282Z error klog an error occurred forwarding 44631 -> 15000: error forwarding port 15000 to pod 71cfae2d8663b4a872e8c925ca096d203f112450c3079c5a4f9e7455cab03eeb, uid : port forward into network namespace "/var/run/netns/b6df59dc-29b1-4518-be08-0cdd7fed18b2": failed to connect to localhost:15000 inside namespace 71cfae2d8663b4a872e8c925ca096d203f112450c3079c5a4f9e7455cab03eeb: dial tcp [::1]:15000: connect: connection refused: Unhandled Error logger=UnhandledError 2025-08-01T13:32:57.224916Z error tf Unable to get execute command "config_dump?include_eds=true" on cluster/pod: cluster-0/istio-echo/srv-v1-57c4b77789-l7scp for: Get "http://localhost:44631/config_dump?include_eds=true": EOF 2025-08-01T13:32:57.224994Z error port forward failed: lost connection to pod 2025-08-01T13:32:57.225736Z error tf Unable to get execute command "clusters" on cluster/pod: cluster-0/istio-echo/srv-v1-57c4b77789-l7scp for: Get "http://localhost:44631/clusters": dial tcp 127.0.0.1:44631: connect: connection refused 2025-08-01T13:32:57.227690Z error klog an error occurred forwarding 42183 -> 15020: error forwarding port 15020 to pod 71cfae2d8663b4a872e8c925ca096d203f112450c3079c5a4f9e7455cab03eeb, uid : port forward into network namespace "/var/run/netns/b6df59dc-29b1-4518-be08-0cdd7fed18b2": failed to connect to localhost:15020 inside namespace 71cfae2d8663b4a872e8c925ca096d203f112450c3079c5a4f9e7455cab03eeb: dial tcp [::1]:15020: connect: connection refused: Unhandled Error logger=UnhandledError 2025-08-01T13:32:57.229269Z error tf Unable to get execute command "debug/ndsz" on cluster/pod: cluster-0/istio-echo/srv-v1-57c4b77789-l7scp for: Get "http://localhost:42183/debug/ndsz": EOF 2025-08-01T13:32:57.229280Z error klog an error occurred forwarding 42397 -> 15020: error forwarding port 15020 to pod 891de1bad957b1a1d15c1dc9dbadecc16c1e2d40481b3ab4212fab176e3ef5f2, uid : port forward into network namespace "/var/run/netns/159f6b64-da24-425d-a4c2-3eed50b35c65": failed to connect to localhost:15020 inside namespace 891de1bad957b1a1d15c1dc9dbadecc16c1e2d40481b3ab4212fab176e3ef5f2: dial tcp [::1]:15020: connect: connection refused: Unhandled Error logger=UnhandledError 2025-08-01T13:32:57.229381Z error port forward failed: lost connection to pod 2025-08-01T13:32:57.229974Z error tf Unable to get execute command "stats/prometheus" on cluster/pod: cluster-0/istio-echo/srv-v1-57c4b77789-l7scp for: Get "http://localhost:42183/stats/prometheus": dial tcp 127.0.0.1:42183: connect: connection refused 2025-08-01T13:32:57.230358Z error klog an error occurred forwarding 41449 -> 15000: error forwarding port 15000 to pod 891de1bad957b1a1d15c1dc9dbadecc16c1e2d40481b3ab4212fab176e3ef5f2, uid : port forward into network namespace "/var/run/netns/159f6b64-da24-425d-a4c2-3eed50b35c65": failed to connect to localhost:15000 inside namespace 891de1bad957b1a1d15c1dc9dbadecc16c1e2d40481b3ab4212fab176e3ef5f2: dial tcp [::1]:15000: connect: connection refused: Unhandled Error logger=UnhandledError 2025-08-01T13:32:57.230956Z error tf Unable to get execute command "debug/ndsz" on cluster/pod: cluster-0/istio-echo/clt-v1-64b65bd9f5-7zdvv for: Get "http://localhost:42397/debug/ndsz": EOF 2025-08-01T13:32:57.230994Z error port forward failed: lost connection to pod 2025-08-01T13:32:57.231766Z error tf Unable to get execute command "config_dump?include_eds=true" on cluster/pod: cluster-0/istio-echo/clt-v1-64b65bd9f5-7zdvv for: Get "http://localhost:41449/config_dump?include_eds=true": EOF 2025-08-01T13:32:57.231813Z error port forward failed: lost connection to pod 2025-08-01T13:32:57.231826Z error tf Unable to get execute command "stats/prometheus" on cluster/pod: cluster-0/istio-echo/clt-v1-64b65bd9f5-7zdvv for: Get "http://localhost:42397/stats/prometheus": dial tcp 127.0.0.1:42397: connect: connection refused 2025-08-01T13:32:57.232297Z error tf Unable to get execute command "clusters" on cluster/pod: cluster-0/istio-echo/clt-v1-64b65bd9f5-7zdvv for: Get "http://localhost:41449/clusters": dial tcp 127.0.0.1:41449: connect: connection refused 2025-08-01T13:32:57.277889Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:52Z/17787c5864-b52a-459a-bc56-cac6ae1469c4 2025-08-01T13:32:57.278206Z info tf istioctl ([x internal-debug --all configz]): completed after 0.1418s 2025-08-01T13:32:57.278939Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:57.358438Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:52Z/17a06377eb-afa4-4e19-b5cb-a4c900083230 2025-08-01T13:32:57.358561Z info tf istioctl ([x internal-debug --all clusterz]): completed after 0.2221s 2025-08-01T13:32:57.359278Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:57.381471Z error tf Test setup error: failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-7c16c963566748/_suite_context/ServiceAccount-Service.4204683110.yaml] to ns istio-echo in cluster cluster-0: apply: patch: serviceaccounts "clt" is forbidden: unable to create new content in namespace istio-echo because it is being terminated 2025-08-01T13:32:57.381511Z info tf === FAILED: Setup: 'telemetry_policy' (failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-7c16c963566748/_suite_context/ServiceAccount-Service.4204683110.yaml] to ns istio-echo in cluster cluster-0: apply: patch: serviceaccounts "clt" is forbidden: unable to create new content in namespace istio-echo because it is being terminated) === 2025-08-01T13:32:57.381517Z error tf Exiting due to setup failure: failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-7c16c963566748/_suite_context/ServiceAccount-Service.4204683110.yaml] to ns istio-echo in cluster cluster-0: apply: patch: serviceaccounts "clt" is forbidden: unable to create new content in namespace istio-echo because it is being terminated 2025-08-01T13:32:57.381542Z error tf === Dumping Namespace istio-echo State for [suite(telemetry_policy)]... 2025-08-01T13:32:57.381559Z error tf === Dumping Istio Deployment State for [suite(telemetry_policy)]... 2025-08-01T13:32:57.527918Z error klog an error occurred forwarding 41559 -> 15020: error forwarding port 15020 to pod 71cfae2d8663b4a872e8c925ca096d203f112450c3079c5a4f9e7455cab03eeb, uid : port forward into network namespace "/var/run/netns/b6df59dc-29b1-4518-be08-0cdd7fed18b2": failed to connect to localhost:15020 inside namespace 71cfae2d8663b4a872e8c925ca096d203f112450c3079c5a4f9e7455cab03eeb: dial tcp [::1]:15020: connect: connection refused: Unhandled Error logger=UnhandledError 2025-08-01T13:32:57.529680Z error klog an error occurred forwarding 40513 -> 15000: error forwarding port 15000 to pod 71cfae2d8663b4a872e8c925ca096d203f112450c3079c5a4f9e7455cab03eeb, uid : port forward into network namespace "/var/run/netns/b6df59dc-29b1-4518-be08-0cdd7fed18b2": failed to connect to localhost:15000 inside namespace 71cfae2d8663b4a872e8c925ca096d203f112450c3079c5a4f9e7455cab03eeb: dial tcp [::1]:15000: connect: connection refused: Unhandled Error logger=UnhandledError 2025-08-01T13:32:57.529963Z error klog an error occurred forwarding 39355 -> 15000: error forwarding port 15000 to pod 891de1bad957b1a1d15c1dc9dbadecc16c1e2d40481b3ab4212fab176e3ef5f2, uid : port forward into network namespace "/var/run/netns/159f6b64-da24-425d-a4c2-3eed50b35c65": failed to connect to localhost:15000 inside namespace 891de1bad957b1a1d15c1dc9dbadecc16c1e2d40481b3ab4212fab176e3ef5f2: dial tcp [::1]:15000: connect: connection refused: Unhandled Error logger=UnhandledError 2025-08-01T13:32:57.530250Z error klog an error occurred forwarding 46345 -> 15020: error forwarding port 15020 to pod 891de1bad957b1a1d15c1dc9dbadecc16c1e2d40481b3ab4212fab176e3ef5f2, uid : port forward into network namespace "/var/run/netns/159f6b64-da24-425d-a4c2-3eed50b35c65": failed to connect to localhost:15020 inside namespace 891de1bad957b1a1d15c1dc9dbadecc16c1e2d40481b3ab4212fab176e3ef5f2: dial tcp [::1]:15020: connect: connection refused: Unhandled Error logger=UnhandledError 2025-08-01T13:32:57.530462Z error tf Unable to get execute command "debug/ndsz" on cluster/pod: cluster-0/istio-echo/srv-v1-57c4b77789-l7scp for: Get "http://localhost:41559/debug/ndsz": EOF 2025-08-01T13:32:57.530702Z error port forward failed: lost connection to pod 2025-08-01T13:32:57.531991Z error port forward failed: lost connection to pod 2025-08-01T13:32:57.532013Z error tf Unable to get execute command "config_dump?include_eds=true" on cluster/pod: cluster-0/istio-echo/clt-v1-64b65bd9f5-7zdvv for: Get "http://localhost:39355/config_dump?include_eds=true": EOF 2025-08-01T13:32:57.532019Z error tf Unable to get execute command "config_dump?include_eds=true" on cluster/pod: cluster-0/istio-echo/srv-v1-57c4b77789-l7scp for: Get "http://localhost:40513/config_dump?include_eds=true": EOF 2025-08-01T13:32:57.532110Z error tf Unable to get execute command "stats/prometheus" on cluster/pod: cluster-0/istio-echo/srv-v1-57c4b77789-l7scp for: Get "http://localhost:41559/stats/prometheus": dial tcp 127.0.0.1:41559: connect: connection refused 2025-08-01T13:32:57.532095Z error port forward failed: lost connection to pod 2025-08-01T13:32:57.532453Z error port forward failed: lost connection to pod 2025-08-01T13:32:57.532625Z error tf Unable to get execute command "debug/ndsz" on cluster/pod: cluster-0/istio-echo/clt-v1-64b65bd9f5-7zdvv for: Get "http://localhost:46345/debug/ndsz": EOF 2025-08-01T13:32:57.532697Z error tf Unable to get execute command "clusters" on cluster/pod: cluster-0/istio-echo/clt-v1-64b65bd9f5-7zdvv for: Get "http://localhost:39355/clusters": dial tcp 127.0.0.1:39355: connect: connection refused 2025-08-01T13:32:57.532728Z error tf Unable to get execute command "clusters" on cluster/pod: cluster-0/istio-echo/srv-v1-57c4b77789-l7scp for: Get "http://localhost:40513/clusters": dial tcp 127.0.0.1:40513: connect: connection refused 2025-08-01T13:32:57.533935Z error tf Unable to get execute command "stats/prometheus" on cluster/pod: cluster-0/istio-echo/clt-v1-64b65bd9f5-7zdvv for: Get "http://localhost:46345/stats/prometheus": dial tcp 127.0.0.1:46345: connect: connection refused 2025-08-01T13:32:57.546336Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:52Z/17f40b1cd1-1261-42ba-b24c-01038caa7765 2025-08-01T13:32:57.546473Z info tf istioctl ([x internal-debug --all mcsz]): completed after 0.4100s 2025-08-01T13:32:57.547401Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:57.637212Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:52Z/170d397924-0766-44f0-b63a-aa886e7bab29 2025-08-01T13:32:57.637431Z info tf istioctl ([x internal-debug --all configz]): completed after 0.2557s 2025-08-01T13:32:57.638429Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:57.689405Z info tf === BEGIN: Cleanup Istio [Suite=telemetry_policy] === 2025-08-01T13:32:57.689456Z info tf === SUCCEEDED: Cleanup Istio in 43.811µs [Suite=telemetry_policy] === FAIL tests/integration/telemetry/policy === Failed === FAIL: tests/integration/telemetry/policy TestOutboundTrafficPolicy_RegistryOnly (4.63s) 2025-08-01T13:32:40.052874Z info tf === BEGIN: Test: 'telemetry_policy[TestOutboundTrafficPolicy_RegistryOnly]' === 2025-08-01T13:32:40.052949Z info tf === BEGIN: Create namespace app === 2025-08-01T13:32:40.059310Z info tf === SUCCEEDED: Create namespace app in 6.34682ms === 2025-08-01T13:32:40.059354Z info tf === BEGIN: Create namespace service === 2025-08-01T13:32:40.064774Z info tf === SUCCEEDED: Create namespace service in 5.418016ms === helper_test.go:184: failed to apply service entries: failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-35ebff5f46c045/TestOutboundTrafficPolicy_RegistryOnly/_test_context/Sidecar.3114539112.yaml] to ns app in cluster cluster-0: apply: patch: sidecars.networking.istio.io "restrict-to-service-entry-namespace" is forbidden: unable to create new content in namespace app because it is being terminated 2025-08-01T13:32:40.098529Z info tf === BEGIN: Deploy echo instances === 2025-08-01T13:32:40.138391Z info klog Waiting for caches to sync controller=echo 2025-08-01T13:32:40.144660Z info klog Waiting for caches to sync controller=echo 2025-08-01T13:32:40.238852Z info klog Caches are synced controller=echo 2025-08-01T13:32:40.245092Z info klog Caches are synced controller=echo 2025-08-01T13:32:40.247833Z info tf === SUCCEEDED: Deploy echo instances in 149.303239ms === helper_test.go:254: failed to apply service entries: failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-35ebff5f46c045/TestOutboundTrafficPolicy_RegistryOnly/_test_context/ServiceEntry.2120844419.yaml] to ns service in cluster cluster-0: apply: patch: serviceentries.networking.istio.io "http" is forbidden: unable to create new content in namespace service because it is being terminated helper_test.go:254: failed to apply gateway: failed applying YAML files [/home/jenkins/workspace/sail/istio-integration-tests-suites/telemetry-policy/artifacts/telemetry-policy-35ebff5f46c045/TestOutboundTrafficPolicy_RegistryOnly/_test_context/Gateway-VirtualService-ServiceEntry.3943954967.yaml] to ns service in cluster cluster-0: apply: patch: gateways.networking.istio.io "istio-egressgateway" is forbidden: unable to create new content in namespace service because it is being terminated. template: apiVersion: networking.istio.io/v1 kind: Gateway metadata: name: istio-egressgateway spec: selector: istio: egressgateway servers: - port: number: 80 name: http protocol: HTTP hosts: - "some-external-site.com" --- apiVersion: networking.istio.io/v1 kind: VirtualService metadata: name: route-via-egressgateway spec: hosts: - "some-external-site.com" gateways: - istio-egressgateway - mesh http: - match: - gateways: - mesh # from sidecars, route to egress gateway service port: 80 route: - destination: host: istio-egressgateway.istio-system.svc.cluster.local port: number: 80 weight: 100 - match: - gateways: - istio-egressgateway port: 80 route: - destination: host: some-external-site.com headers: request: add: handled-by-egress-gateway: "true" --- apiVersion: networking.istio.io/v1 kind: ServiceEntry metadata: name: ext-service-entry spec: hosts: - "some-external-site.com" location: MESH_EXTERNAL endpoints: - address: destination.app.svc.cluster.local network: external ports: - number: 80 name: http resolution: DNS 2025-08-01T13:32:40.261062Z info tf === DONE (failed): Test: 'telemetry_policy[TestOutboundTrafficPolicy_RegistryOnly] (208.184208ms)' === 2025-08-01T13:32:40.261158Z error tf === Dumping Namespace istio-ratelimit State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:40.261199Z error tf === Dumping Namespace istio-echo State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:40.261196Z error tf === Dumping Istio Deployment State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:40.547843Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:40Z/14704a3080-c689-4884-b576-e5f6c7ce52c9 2025-08-01T13:32:40.548010Z info tf istioctl ([x internal-debug --all mcsz]): completed after 0.2865s 2025-08-01T13:32:40.548769Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:40.658327Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:40Z/14baab21e5-0d9c-4146-b6fc-5392538cfd79 2025-08-01T13:32:40.658653Z info tf istioctl ([x internal-debug --all configz]): completed after 0.3971s 2025-08-01T13:32:40.659203Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:40.773827Z info adsc Received type=istio.io/debug count=1 nonce=2025-08-01T13:32:40Z/14b6a5a807-8fa0-455a-b4e7-9095787b1807 2025-08-01T13:32:40.773938Z info tf istioctl ([x internal-debug --all clusterz]): completed after 0.5123s 2025-08-01T13:32:40.774776Z info adsc connection closed with err: rpc error: code = Unavailable desc = error reading from server: EOF 2025-08-01T13:32:41.472474Z error tf === Dumping Namespace service State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:41.472485Z error tf === Dumping Namespace app State for TestOutboundTrafficPolicy_RegistryOnly... 2025-08-01T13:32:42.588987Z warn tf cluster/pod cluster-0/app/client-v1-b45b6bf85-vvntc found warming resources (dynamic_warming_clusters) on attempt 1 DONE 2 runs, 16 tests, 1 failure in 87.104s exec: go version