emissary-ingress / emissary

open source Kubernetes-native API gateway for microservices built on the Envoy Proxy
https://www.getambassador.io
Apache License 2.0
4.39k stars 689 forks source link

Issues reaching app externally via Ambassador #4332

Open thomaszimny opened 2 years ago

thomaszimny commented 2 years ago

Describe the bug We are unable to reach our app externally to our network. Also, we are rerouted to an incorrect URL.

To Reproduce Steps to reproduce the behavior:

  1. Go to preprod.[app].com
  2. See error
  3. Sometimes we are routed to [subdomain]-preprod.[app].com This is a related URL but unintended behavior.

Expected behavior We expect to be routed to our app successfully via Ambassador.

Versions (please complete the following information):

Host:

apiVersion: getambassador.io/v2
kind: Host
metadata:
  annotations:
    external-dns.ambassador-service: emissary-ingress.emissary-system
  creationTimestamp: "2022-07-08T15:16:54Z"
  generation: 2
  managedFields:
  - apiVersion: getambassador.io/v3alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        f:acmeProvider:
          f:authority: {}
        f:hostname: {}
        f:tlsSecret:
          f:name: {}
    manager: Terraform
    operation: Apply
    time: "2022-07-08T15:16:54Z"
  - apiVersion: getambassador.io/v3alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:state: {}
    manager: amb-sidecar
    operation: Update
    time: "2022-07-08T15:16:55Z"
  - apiVersion: getambassador.io/v2
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:annotations:
          .: {}
          f:external-dns.ambassador-service: {}
      f:spec:
        f:tls:
          .: {}
          f:min_tls_version: {}
    manager: agent
    operation: Update
    time: "2022-07-11T19:19:23Z"
  name: preprod.jnxt.cdf2.usae.bah.com
  namespace: jllis-preprod
  resourceVersion: "18922931"
  uid: 88767593-7d84-467e-8556-4ea5994c598f
spec:
  acmeProvider:
    authority: none
  ambassador_id:
  - --apiVersion-v3alpha1-only--default
  hostname: preprod.jnxt.cdf2.usae.bah.com
  tls:
    min_tls_version: v1.2
  tlsSecret:
    name: preprod
status:
  state: Ready
  tlsCertificateSource: Other

Listener:

apiVersion: getambassador.io/v3alpha1
kind: Listener
metadata:
  creationTimestamp: "2022-07-10T14:09:25Z"
  generation: 2
  managedFields:
  - apiVersion: getambassador.io/v3alpha1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        .: {}
        f:hostBinding:
          .: {}
          f:namespace:
            .: {}
            f:from: {}
        f:l7Depth: {}
        f:port: {}
        f:protocol: {}
        f:securityModel: {}
    manager: agent
    operation: Update
    time: "2022-07-11T16:20:11Z"
  name: listener-https
  namespace: ambassador
  resourceVersion: "18834368"
  uid: 032c528e-79f0-4d5a-9101-18fc1e4b0e61
spec:
  hostBinding:
    namespace:
      from: ALL
  l7Depth: 1
  port: 8443
  protocol: HTTPS
  securityModel: XFP
cindymullins-dw commented 2 years ago

Can you share more about the error - what are you seeing exactly? Any error codes? Can you also please share your Mapping?