Skip to content

Instantly share code, notes, and snippets.

@therealmitchconnors
Created October 25, 2023 18:58
Show Gist options
  • Save therealmitchconnors/5319140234a9b1625ed13d760c470e7d to your computer and use it in GitHub Desktop.
Save therealmitchconnors/5319140234a9b1625ed13d760c470e7d to your computer and use it in GitHub Desktop.
misbehaving ingress gateway istio 1.19.3 w/ ambient
NAME SERVICE FQDN PORT SUBSET DIRECTION TYPE DESTINATION RULE
cluster/BlackHoleCluster cluster/BlackHoleCluster - - - STATIC
cluster/agent cluster/agent - - - STATIC
cluster/outbound|7000||argocd-applicationset-controller.akuity.svc.cluster.local argocd-applicationset-controller.akuity.svc.cluster.local 7000 - outbound EDS
cluster/outbound|8080||argocd-applicationset-controller.akuity.svc.cluster.local argocd-applicationset-controller.akuity.svc.cluster.local 8080 - outbound EDS
cluster/outbound|8082||argocd-metrics.akuity.svc.cluster.local argocd-metrics.akuity.svc.cluster.local 8082 - outbound EDS
cluster/outbound|9001||argocd-notifications-controller-metrics.akuity.svc.cluster.local argocd-notifications-controller-metrics.akuity.svc.cluster.local 9001 - outbound EDS
cluster/outbound|6379||argocd-redis.akuity.svc.cluster.local argocd-redis.akuity.svc.cluster.local 6379 - outbound EDS
cluster/outbound|8081||argocd-repo-server.akuity.svc.cluster.local argocd-repo-server.akuity.svc.cluster.local 8081 - outbound EDS
cluster/outbound|8084||argocd-repo-server.akuity.svc.cluster.local argocd-repo-server.akuity.svc.cluster.local 8084 - outbound EDS
cluster/outbound|80||bookinfo-gateway-istio.ambient.svc.cluster.local bookinfo-gateway-istio.ambient.svc.cluster.local 80 - outbound EDS
cluster/outbound|15021||bookinfo-gateway-istio.ambient.svc.cluster.local bookinfo-gateway-istio.ambient.svc.cluster.local 15021 - outbound EDS
cluster/connect_originate cluster/connect_originate - - - ORIGINAL_DST
cluster/outbound|80||default-http-backend.kube-system.svc.cluster.local default-http-backend.kube-system.svc.cluster.local 80 - outbound EDS
cluster/outbound|9080||details.ambient.svc.cluster.local details.ambient.svc.cluster.local 9080 - outbound EDS
cluster/outbound|9080||details.default.svc.cluster.local details.default.svc.cluster.local 9080 - outbound EDS
cluster/outbound|443||gateway-api-admission-server.gateway-system.svc.cluster.local gateway-api-admission-server.gateway-system.svc.cluster.local 443 - outbound EDS
cluster/outbound|3000||grafana.istio-system.svc.cluster.local grafana.istio-system.svc.cluster.local 3000 - outbound EDS
cluster/outbound|80||istio-egressgateway.istio-system.svc.cluster.local istio-egressgateway.istio-system.svc.cluster.local 80 - outbound EDS
cluster/outbound|443||istio-egressgateway.istio-system.svc.cluster.local istio-egressgateway.istio-system.svc.cluster.local 443 - outbound EDS
cluster/outbound|80||istio-ingressgateway.istio-system.svc.cluster.local istio-ingressgateway.istio-system.svc.cluster.local 80 - outbound EDS
cluster/outbound|443||istio-ingressgateway.istio-system.svc.cluster.local istio-ingressgateway.istio-system.svc.cluster.local 443 - outbound EDS
cluster/outbound|15021||istio-ingressgateway.istio-system.svc.cluster.local istio-ingressgateway.istio-system.svc.cluster.local 15021 - outbound EDS
cluster/outbound|15443||istio-ingressgateway.istio-system.svc.cluster.local istio-ingressgateway.istio-system.svc.cluster.local 15443 - outbound EDS
cluster/outbound|31400||istio-ingressgateway.istio-system.svc.cluster.local istio-ingressgateway.istio-system.svc.cluster.local 31400 - outbound EDS
cluster/outbound|443||istiod-1-18-4.istio-system.svc.cluster.local istiod-1-18-4.istio-system.svc.cluster.local 443 - outbound EDS
cluster/outbound|15010||istiod-1-18-4.istio-system.svc.cluster.local istiod-1-18-4.istio-system.svc.cluster.local 15010 - outbound EDS
cluster/outbound|15012||istiod-1-18-4.istio-system.svc.cluster.local istiod-1-18-4.istio-system.svc.cluster.local 15012 - outbound EDS
cluster/outbound|15014||istiod-1-18-4.istio-system.svc.cluster.local istiod-1-18-4.istio-system.svc.cluster.local 15014 - outbound EDS
cluster/outbound|443||istiod-1-18-5.istio-system.svc.cluster.local istiod-1-18-5.istio-system.svc.cluster.local 443 - outbound EDS
cluster/outbound|15010||istiod-1-18-5.istio-system.svc.cluster.local istiod-1-18-5.istio-system.svc.cluster.local 15010 - outbound EDS
cluster/outbound|15012||istiod-1-18-5.istio-system.svc.cluster.local istiod-1-18-5.istio-system.svc.cluster.local 15012 - outbound EDS
cluster/outbound|15014||istiod-1-18-5.istio-system.svc.cluster.local istiod-1-18-5.istio-system.svc.cluster.local 15014 - outbound EDS
cluster/outbound|443||istiod-1-19-3.istio-system.svc.cluster.local istiod-1-19-3.istio-system.svc.cluster.local 443 - outbound EDS
cluster/outbound|15010||istiod-1-19-3.istio-system.svc.cluster.local istiod-1-19-3.istio-system.svc.cluster.local 15010 - outbound EDS
cluster/outbound|15012||istiod-1-19-3.istio-system.svc.cluster.local istiod-1-19-3.istio-system.svc.cluster.local 15012 - outbound EDS
cluster/outbound|15014||istiod-1-19-3.istio-system.svc.cluster.local istiod-1-19-3.istio-system.svc.cluster.local 15014 - outbound EDS
cluster/outbound|443||istiod.istio-system.svc.cluster.local istiod.istio-system.svc.cluster.local 443 - outbound EDS
cluster/outbound|15010||istiod.istio-system.svc.cluster.local istiod.istio-system.svc.cluster.local 15010 - outbound EDS
cluster/outbound|15012||istiod.istio-system.svc.cluster.local istiod.istio-system.svc.cluster.local 15012 - outbound EDS
cluster/outbound|15014||istiod.istio-system.svc.cluster.local istiod.istio-system.svc.cluster.local 15014 - outbound EDS
cluster/outbound|4317||jaeger-collector.istio-system.svc.cluster.local jaeger-collector.istio-system.svc.cluster.local 4317 - outbound EDS
cluster/outbound|4318||jaeger-collector.istio-system.svc.cluster.local jaeger-collector.istio-system.svc.cluster.local 4318 - outbound EDS
cluster/outbound|9411||jaeger-collector.istio-system.svc.cluster.local jaeger-collector.istio-system.svc.cluster.local 9411 - outbound EDS
cluster/outbound|14250||jaeger-collector.istio-system.svc.cluster.local jaeger-collector.istio-system.svc.cluster.local 14250 - outbound EDS
cluster/outbound|14268||jaeger-collector.istio-system.svc.cluster.local jaeger-collector.istio-system.svc.cluster.local 14268 - outbound EDS
cluster/outbound|9090||kiali.istio-system.svc.cluster.local kiali.istio-system.svc.cluster.local 9090 - outbound EDS
cluster/outbound|20001||kiali.istio-system.svc.cluster.local kiali.istio-system.svc.cluster.local 20001 - outbound EDS
cluster/outbound|53||kube-dns.kube-system.svc.cluster.local kube-dns.kube-system.svc.cluster.local 53 - outbound EDS
cluster/outbound|443||kubernetes.default.svc.cluster.local kubernetes.default.svc.cluster.local 443 - outbound EDS
cluster/outbound|8089||loadgen.ambient.svc.cluster.local loadgen.ambient.svc.cluster.local 8089 - outbound EDS
cluster/outbound|443||metrics-server.kube-system.svc.cluster.local metrics-server.kube-system.svc.cluster.local 443 - outbound EDS
cluster/outbound|9080||productpage.ambient.svc.cluster.local productpage.ambient.svc.cluster.local 9080 - outbound EDS
cluster/outbound|9080||productpage.default.svc.cluster.local productpage.default.svc.cluster.local 9080 - outbound EDS
cluster/outbound|9090||prometheus.istio-system.svc.cluster.local prometheus.istio-system.svc.cluster.local 9090 - outbound EDS
cluster/prometheus_stats cluster/prometheus_stats - - - STATIC
cluster/outbound|9080||ratings.ambient.svc.cluster.local ratings.ambient.svc.cluster.local 9080 - outbound EDS
cluster/outbound|9080||ratings.default.svc.cluster.local ratings.default.svc.cluster.local 9080 - outbound EDS
cluster/outbound|9080||reviews.ambient.svc.cluster.local reviews.ambient.svc.cluster.local 9080 - outbound EDS
cluster/outbound|9080||reviews.default.svc.cluster.local reviews.default.svc.cluster.local 9080 - outbound EDS
cluster/sds-grpc cluster/sds-grpc - - - STATIC
cluster/outbound|80||tracing.istio-system.svc.cluster.local tracing.istio-system.svc.cluster.local 80 - outbound EDS
cluster/outbound|16685||tracing.istio-system.svc.cluster.local tracing.istio-system.svc.cluster.local 16685 - outbound EDS
cluster/xds-grpc cluster/xds-grpc - - - STATIC
cluster/zipkin cluster/zipkin - - - STRICT_DNS
cluster/outbound|9411||zipkin.istio-system.svc.cluster.local zipkin.istio-system.svc.cluster.local 9411 - outbound EDS
NAME ADDRESSES PORT MATCH DESTINATION
listener/connect_originate 0 ALL Cluster: connect_originate
listener/0.0.0.0_80 0.0.0.0 80 ALL Route: http.80
listener/ 0.0.0.0 15021 ALL Inline Route: /healthz/ready*
listener/ 0.0.0.0 15090 ALL Inline Route: /stats/prometheus*
NAME VHOST NAME DOMAINS MATCH VIRTUAL SERVICE
route/http.80 *:80 * /productpage bookinfo-0-istio-autogenerated-k8s-gateway.ambient
route/http.80 *:80 * /logout bookinfo-0-istio-autogenerated-k8s-gateway.ambient
route/http.80 *:80 * /login bookinfo-0-istio-autogenerated-k8s-gateway.ambient
route/http.80 *:80 * bookinfo-0-istio-autogenerated-k8s-gateway.ambient
route/http.80 *:80 * bookinfo-0-istio-autogenerated-k8s-gateway.ambient
route/ backend * /healthz/ready*
route/ backend * /stats/prometheus*
RESOURCE NAME TYPE STATUS VALID CERT SERIAL NUMBER NOT AFTER NOT BEFORE
secret/default Cert Chain ACTIVE true 982cf72d7070865221f3c1c9d5f4bdca 2023-10-26T18:46:52Z 2023-10-25T18:44:52Z
secret/ROOTCA CA ACTIVE true 641d1f3b3264ac2a4a6bfe2a12ae1e71 2033-02-25T23:50:36Z 2023-02-28T23:50:36Z
NAME STATUS LOCALITY CLUSTER
endpoint/127.0.0.1:15020 HEALTHY agent
endpoint/10.28.1.19:8082 HEALTHY us-central1/us-central1-c outbound|8082||argocd-metrics.akuity.svc.cluster.local
endpoint/10.28.1.9:9001 HEALTHY us-central1/us-central1-c outbound|9001||argocd-notifications-controller-metrics.akuity.svc.cluster.local
endpoint/10.28.2.4:6379 HEALTHY us-central1/us-central1-c outbound|6379||argocd-redis.akuity.svc.cluster.local
endpoint/10.28.2.12:8081 HEALTHY us-central1/us-central1-c outbound|8081||argocd-repo-server.akuity.svc.cluster.local
endpoint/10.28.1.13:8081 HEALTHY us-central1/us-central1-c outbound|8081||argocd-repo-server.akuity.svc.cluster.local
endpoint/10.28.2.12:8084 HEALTHY us-central1/us-central1-c outbound|8084||argocd-repo-server.akuity.svc.cluster.local
endpoint/10.28.1.13:8084 HEALTHY us-central1/us-central1-c outbound|8084||argocd-repo-server.akuity.svc.cluster.local
endpoint/envoy://connect_originate/10.28.2.41:80 HEALTHY us-central1/us-central1-c outbound|80||bookinfo-gateway-istio.ambient.svc.cluster.local
endpoint/envoy://connect_originate/10.28.2.41:15021 HEALTHY us-central1/us-central1-c outbound|15021||bookinfo-gateway-istio.ambient.svc.cluster.local
endpoint/10.28.2.11:8080 HEALTHY us-central1/us-central1-c outbound|80||default-http-backend.kube-system.svc.cluster.local
endpoint/envoy://connect_originate/10.28.0.34:9080 HEALTHY us-central1/us-central1-c outbound|9080||details.ambient.svc.cluster.local
endpoint/10.28.1.15:9080 HEALTHY us-central1/us-central1-c outbound|9080||details.default.svc.cluster.local
endpoint/10.28.1.45:8443 HEALTHY us-central1/us-central1-c outbound|443||gateway-api-admission-server.gateway-system.svc.cluster.local
endpoint/10.28.2.27:3000 HEALTHY us-central1/us-central1-c outbound|3000||grafana.istio-system.svc.cluster.local
endpoint/10.28.2.7:8080 HEALTHY us-central1/us-central1-c outbound|80||istio-egressgateway.istio-system.svc.cluster.local
endpoint/10.28.2.7:8443 HEALTHY us-central1/us-central1-c outbound|443||istio-egressgateway.istio-system.svc.cluster.local
endpoint/10.28.2.10:8080 HEALTHY us-central1/us-central1-c outbound|80||istio-ingressgateway.istio-system.svc.cluster.local
endpoint/10.28.2.10:8443 HEALTHY us-central1/us-central1-c outbound|443||istio-ingressgateway.istio-system.svc.cluster.local
endpoint/10.28.2.10:15021 HEALTHY us-central1/us-central1-c outbound|15021||istio-ingressgateway.istio-system.svc.cluster.local
endpoint/10.28.2.10:15443 HEALTHY us-central1/us-central1-c outbound|15443||istio-ingressgateway.istio-system.svc.cluster.local
endpoint/10.28.2.10:31400 HEALTHY us-central1/us-central1-c outbound|31400||istio-ingressgateway.istio-system.svc.cluster.local
endpoint/10.28.0.46:15017 HEALTHY us-central1/us-central1-c outbound|443||istiod-1-18-4.istio-system.svc.cluster.local
endpoint/10.28.0.46:15010 HEALTHY us-central1/us-central1-c outbound|15010||istiod-1-18-4.istio-system.svc.cluster.local
endpoint/10.28.0.46:15012 HEALTHY us-central1/us-central1-c outbound|15012||istiod-1-18-4.istio-system.svc.cluster.local
endpoint/10.28.0.46:15014 HEALTHY us-central1/us-central1-c outbound|15014||istiod-1-18-4.istio-system.svc.cluster.local
endpoint/10.28.0.56:15017 HEALTHY us-central1/us-central1-c outbound|443||istiod-1-18-5.istio-system.svc.cluster.local
endpoint/10.28.0.56:15010 HEALTHY us-central1/us-central1-c outbound|15010||istiod-1-18-5.istio-system.svc.cluster.local
endpoint/10.28.0.56:15012 HEALTHY us-central1/us-central1-c outbound|15012||istiod-1-18-5.istio-system.svc.cluster.local
endpoint/10.28.0.56:15014 HEALTHY us-central1/us-central1-c outbound|15014||istiod-1-18-5.istio-system.svc.cluster.local
endpoint/10.28.1.44:15017 HEALTHY us-central1/us-central1-c outbound|443||istiod-1-19-3.istio-system.svc.cluster.local
endpoint/10.28.1.44:15010 HEALTHY us-central1/us-central1-c outbound|15010||istiod-1-19-3.istio-system.svc.cluster.local
endpoint/10.28.1.44:15012 HEALTHY us-central1/us-central1-c outbound|15012||istiod-1-19-3.istio-system.svc.cluster.local
endpoint/10.28.1.44:15014 HEALTHY us-central1/us-central1-c outbound|15014||istiod-1-19-3.istio-system.svc.cluster.local
endpoint/10.28.1.44:15017 HEALTHY us-central1/us-central1-c outbound|443||istiod.istio-system.svc.cluster.local
endpoint/10.28.1.44:15010 HEALTHY us-central1/us-central1-c outbound|15010||istiod.istio-system.svc.cluster.local
endpoint/10.28.1.44:15012 HEALTHY us-central1/us-central1-c outbound|15012||istiod.istio-system.svc.cluster.local
endpoint/10.28.1.44:15014 HEALTHY us-central1/us-central1-c outbound|15014||istiod.istio-system.svc.cluster.local
endpoint/10.28.0.38:4317 HEALTHY us-central1/us-central1-c outbound|4317||jaeger-collector.istio-system.svc.cluster.local
endpoint/10.28.0.38:4318 HEALTHY us-central1/us-central1-c outbound|4318||jaeger-collector.istio-system.svc.cluster.local
endpoint/10.28.0.38:9411 HEALTHY us-central1/us-central1-c outbound|9411||jaeger-collector.istio-system.svc.cluster.local
endpoint/10.28.0.38:14250 HEALTHY us-central1/us-central1-c outbound|14250||jaeger-collector.istio-system.svc.cluster.local
endpoint/10.28.0.38:14268 HEALTHY us-central1/us-central1-c outbound|14268||jaeger-collector.istio-system.svc.cluster.local
endpoint/10.28.0.39:9090 HEALTHY us-central1/us-central1-c outbound|9090||kiali.istio-system.svc.cluster.local
endpoint/10.28.0.39:20001 HEALTHY us-central1/us-central1-c outbound|20001||kiali.istio-system.svc.cluster.local
endpoint/10.28.2.9:53 HEALTHY us-central1/us-central1-c outbound|53||kube-dns.kube-system.svc.cluster.local
endpoint/10.28.0.7:53 HEALTHY us-central1/us-central1-c outbound|53||kube-dns.kube-system.svc.cluster.local
endpoint/10.128.0.18:443 HEALTHY outbound|443||kubernetes.default.svc.cluster.local
endpoint/envoy://connect_originate/10.28.0.55:8089 HEALTHY us-central1/us-central1-c outbound|8089||loadgen.ambient.svc.cluster.local
endpoint/10.28.2.5:10250 HEALTHY us-central1/us-central1-c outbound|443||metrics-server.kube-system.svc.cluster.local
endpoint/envoy://connect_originate/10.28.2.23:9080 HEALTHY us-central1/us-central1-c outbound|9080||productpage.ambient.svc.cluster.local
endpoint/10.28.0.9:9080 HEALTHY us-central1/us-central1-c outbound|9080||productpage.default.svc.cluster.local
endpoint/10.28.1.51:9090 HEALTHY us-central1/us-central1-c outbound|9090||prometheus.istio-system.svc.cluster.local
endpoint/127.0.0.1:15000 HEALTHY prometheus_stats
endpoint/envoy://connect_originate/10.28.0.33:9080 HEALTHY us-central1/us-central1-c outbound|9080||ratings.ambient.svc.cluster.local
endpoint/10.28.0.10:9080 HEALTHY us-central1/us-central1-c outbound|9080||ratings.default.svc.cluster.local
endpoint/envoy://connect_originate/10.28.2.22:9080 HEALTHY us-central1/us-central1-c outbound|9080||reviews.ambient.svc.cluster.local
endpoint/envoy://connect_originate/10.28.2.24:9080 HEALTHY us-central1/us-central1-c outbound|9080||reviews.ambient.svc.cluster.local
endpoint/envoy://connect_originate/10.28.0.35:9080 HEALTHY us-central1/us-central1-c outbound|9080||reviews.ambient.svc.cluster.local
endpoint/10.28.2.17:9080 HEALTHY us-central1/us-central1-c outbound|9080||reviews.default.svc.cluster.local
endpoint/10.28.2.18:9080 HEALTHY us-central1/us-central1-c outbound|9080||reviews.default.svc.cluster.local
endpoint/10.28.1.16:9080 HEALTHY us-central1/us-central1-c outbound|9080||reviews.default.svc.cluster.local
endpoint/./var/run/secrets/workload-spiffe-uds/socket HEALTHY sds-grpc
endpoint/10.28.0.38:16686 HEALTHY us-central1/us-central1-c outbound|80||tracing.istio-system.svc.cluster.local
endpoint/10.28.0.38:16685 HEALTHY us-central1/us-central1-c outbound|16685||tracing.istio-system.svc.cluster.local
endpoint/./etc/istio/proxy/XDS HEALTHY xds-grpc
endpoint/10.32.14.45:9411 HEALTHY zipkin
endpoint/10.28.0.38:9411 HEALTHY us-central1/us-central1-c outbound|9411||zipkin.istio-system.svc.cluster.local
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment