From e6c265c74f0dec78801e2c6a7a5f0a1bbd5a8922 Mon Sep 17 00:00:00 2001 From: savagebidoof Date: Mon, 24 Apr 2023 00:22:32 +0200 Subject: [PATCH] added an example --- Istio/00-Troubleshooting/README.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/Istio/00-Troubleshooting/README.md b/Istio/00-Troubleshooting/README.md index fe5d235..8477018 100644 --- a/Istio/00-Troubleshooting/README.md +++ b/Istio/00-Troubleshooting/README.md @@ -39,6 +39,18 @@ istioctl analyze -n istio-operator Info [IST0102] (Namespace istio-operator) The namespace is not enabled for Istio injection. Run 'kubectl label namespace istio-operator istio-injection=enabled' to enable it, or 'kubectl label namespace istio-operator istio-injection=disabled' to explicitly mark it as not needing injection. ``` +## Example of spotting a misconfiguration + +In this example, I have configured the gateway to listen to a port that currently is not open in the Isito Load Balancer selected. + +```shell +istioctl analyze +``` +```text +Warning [IST0104] (Gateway default/helloworld-gateway) The gateway refers to a port that is not exposed on the workload (pod selector istio=ingressgateway; port 81) +``` + + # Start the packet capture process on the istio-proxy container from a pod. Target a pod and start a packet capture on the istio-proxy container.