kubeslice / kubeslice/worker-operator

Bug: Bookinfo pods in crashloop when istio mtls is enabled

Open
#331 7 comments 0 reactions 1 assignee Assigned to @kon3m View on GitHub
bug
Dominant language
Go
Stars
62
Forks
33
Avg merge
3d 10h
Merged PRs (30d)
3

Description

### 📜 Description

Application pods in the bookinfo namespace connected to a slice go into a crashloop when using istio mtls peer authentication in STRICT mode.

### 👟 Reproduction steps

1. Create a slice and add the bookinfo namespace to the applicationNamespace list in the slice configuration.
2. Deploy the bookinfo app on the worker cluster.
3. Enable istio peer authentication with STRICT mode. For example:
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
name: tls-policy
namespace: bookinfo
spec:
mtls:
mode: STRICT
4. Deploy the bookinfo app in the bookinfo namespace. You will observe the app pods going into a crash loop.

### 👍 Expected behavior

The app pods should not crash.

### 👎 Actual Behavior

The app pods go into a crash loop.

### 🐚 Relevant log output

_No response_

### Version

_No response_

### 🖥️ What operating system are you seeing the problem on?

_No response_

### ✅ Proposed Solution

_No response_

### 👀 Have you spent some time to check if this issue has been raised before?

- [X] I checked and didn't find any similar issue

### Code of Conduct

- [X] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.