检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Run the iptables iptables –t nat –L –n –v command to check whether the configurations take effect for specified IP address ranges and ports. Parent topic: Managing Traffic
On the Gateway Management page, the Add Route button of the target gateway is unavailable. Gateway resources are modified using YAML. When a route is added on the Gateway Management page, the target service cannot be selected.
Adding a Service What Do I Do If an Added Gateway Does Not Take Effect? Why Does It Take a Long Time to Start the Demo Application in Experiencing Service Mesh in One Click? Why Cannot I Access the Page of the Deployed Demo Application?
Scheduling Policies Taints and Tolerations Load Affinity Node Affinity Parent topic: Gateway Workloads
Security Configuring a Security Policy JWT Authentication Principles Authenticating JWT Requests on the Ingress Gateway Using ASM
In the above approach, a gateway or workload deployment should only be able to access credentials (TLS certificates and private keys) stored in the Kubernetes secrets within its namespace.
Graceful Pod Deletion Termination Drain Duration of the Istio-proxy Container Pod Scale-In Time Window Parent topic: Gateway Workloads
Failed to check Istio gateway labels before the upgrade. Solution: Configure Istio gateway labels (specified by matchLabels) in {app: istio-ingressgateway, istio: ingressgateway} format. Failed to check add-ons before the upgrade.
Service Management Configuration Diagnosis Fixing Items Manually Fixing Items Automatically Gateway Management Adding a Gateway Adding a Route Grayscale Release Grayscale Release Overview Creating a Grayscale Release Task Basic Operations on a Grayscale Task Mesh Configuration Overview
All related workloads and Istio resources including DestinationRule, VirtualService, and Gateway need to be created. Therefore, the creation takes a comparatively long time. Parent topic: Adding a Service
Kubernetes Gateway API is supported. For details, visit https://istio.io/latest/news/releases/1.18.x/. Parent topic: Upgrades
How Do I Configure max_concurrent_streams for a Gateway? How Do I Fix Compatibility Issues Between Istio CNI and Init Containers?
On the Service Gateway page, check whether the service gateway route is displayed properly. Parent topic: Upgrades
The private version of Huawei Virtual Service Delegation goes online, providing decoupling gateway traffic configuration for major customers in advance. CCE clusters v1.13, v1.15, v1.17, and v1.19 are supported.
Constraints on Service Meshes When you use service meshes for service governance, a Deployment can only match with one service to avoid abnormal grayscale release, gateway access, or other functions.
Their labels are the same as those of the old gateway instances. If you have created an istio-ingressgateway instance in another namespace, the instance will be automatically upgraded to the new version istio-ingressgateway-{revision}-{namespace}.
You are advised to restart existing services to avoid the following exceptions: If the cluster enables the current mesh again after it is uninstalled, gateway access failed. Uninstalling a service mesh will uninstall its control plane components and data plane sidecars.
Otherwise, functions such as grayscale release or gateway access may fail. If the workload of a service uses the host network mode (hostNetwork: true is configured for the pod), sidecars cannot be injected for the service.
The server was acting as a gateway or proxy and received an invalid response from the upstream server. 503 ServiceUnavailable The requested service is invalid.
JWKS: JWT rule set For details about the principles and application examples of JWT authentication, see JWT Authentication Principles and Authenticating JWT Requests on the Ingress Gateway Using ASM. Parent topic: Security
