You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/azure/azure-kubernetes/extensions/istio-add-on-egress-gateway.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -94,7 +94,7 @@ Make sure that the `StaticGatewayConfiguration` resource for the Istio add-on eg
94
94
95
95
### Step 2: Make sure that an egressIpPrefix is provisioned for the StaticGatewayConfiguration
96
96
97
-
If the Istio egress gateway pods are stuck in`ContainerCreating`, the `kube-egress-gateway-cni-manager` pod might prevent the `istio-proxy` container from being created because the `StaticGatewayConfiguration` resource doesn't have an `egressIpPrefix` assigned to it yet. To verify whether it's assigned an `egressIpPrefix`, check the `status` value of `StaticGatewayConfiguration`for that Istio egress gateway. To determine whether any errors affect the `egressIpPrefix` provisioning, run the `kubectl describe`command against `StaticGatewayConfiguration`.
97
+
If the Istio egress gateway pods are stuck in`ContainerCreating`, the `kube-egress-gateway-cni-manager` pod might prevent the `istio-proxy` container from being created because the `StaticGatewayConfiguration` resource doesn't have an `egressIpPrefix` assigned to it yet. To verify whether an `egressIpPrefix` is assigned to the resource, check the `status` value of `StaticGatewayConfiguration` for that Istio egress gateway. To determine whether any errors affect the `egressIpPrefix` provisioning, run the `kubectl describe` command against `StaticGatewayConfiguration`.
98
98
99
99
> [!NOTE]
100
100
> The process to assign an `egressIpPrefix` to a Static Egress Gateway `StaticGatewayConfiguration` can take up to five minutes.
@@ -104,7 +104,7 @@ kubectl get staticgatewayconfiguration $ISTIO_SGC_NAME -n $ISTIO_EGRESS_NAMESPAC
You can also check the logs of the `kube-egress-gateway-cni-manager`podthat runs on the node of the failing Istio egress pod. If any issues affect `egressIpPrefix` provisioning, or if an IP prefix still isn't assigned after approximately five minutes, you might have to further [debug the Static Egress Gateway](#step-8-debug-the-static-egress-gateway).
107
+
You can also check the logs of the `kube-egress-gateway-cni-manager` pod that runs on the node of the failing Istio egress pod. If any issues affect `egressIpPrefix` provisioning, or if an IP prefix still isn't assigned after approximately five minutes, you might have to further [debug the Static Egress Gateway](#step-8-debug-the-static-egress-gateway).
108
108
109
109
### Step 3: Make sure that the StaticGatewayConfiguration references a valid gateway agent pool
110
110
@@ -217,7 +217,7 @@ If you try to configure the Istio egress gateway to perform mutual TLS (mTLS) or
217
217
218
218
### Step 6: Make sure that applications send plaintext HTTP requests for egress gateway TLS origination and authorization policies
219
219
220
-
To originate TLS and apply authorization policies at the egress gateway, workloads in the mesh must send HTTP requests. The sidecar proxies can then use mTLS when they forward requests to the egress gateway. The egress gateway terminate the mTLS connection, and it originate a TLS/HTTPS connection to the destination host.
220
+
To originate TLS and apply authorization policies at the egress gateway, workloads in the mesh must send HTTP requests. The sidecar proxies can then use mTLS when they forward requests to the egress gateway. The egress gateway terminates the mTLS connection, and it originate a TLS/HTTPS connection to the destination host.
221
221
222
222
[!INCLUDE [Third-party information disclaimer](../../../includes/third-party-disclaimer.md)]
0 commit comments