search

cloudfoundry / cf-k8s-networking

building a cloud foundry without gorouter....
Apache License 2.0
32 stars 17 forks source link

Allow traffic to istio-sidecar-injector on port 9443. #34

Closed jkbschmid closed 4 years ago

jkbschmid commented 4 years ago

Problem

NetworkPolicy blocks traffic from API server to istio-sidecar-injector.

Solution

Fixes https://github.com/cloudfoundry/cf-for-k8s/issues/69

cf-gitbot commented 4 years ago

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/171877759

The labels on this github issue will be updated when the story is started.

tcdowney commented 4 years ago

Thanks @jkbschmid!

I commented on this in the original issue (https://github.com/cloudfoundry/cf-for-k8s/issues/69#issuecomment-601265320), but want to mention it here as well that this is a big indicator that the GKE clusters we're testing with in CI are not providing enough coverage.

Created a placeholder story for us to address this: https://www.pivotaltracker.com/story/show/171883349