kubernetes - Istio limit access to Google cloud resources -
i have service running o google container engine(kubernetes). access google cloud storage , works fine.
on same kubernetes cluster, installed istio 0.1 following https://istio.io/v-0.1/docs/tasks/installing-istio.html
i deploy service via kube-inject kubectl create -f <(istioctl kube-inject -f myservice.yaml)
service cannot access google cloud storage more. following error message:
java.lang.illegalargumentexception: project id required service not determined builder or environment. please set project id using builder.
to me looks kube-inject , sidecar make service cannot access information google cloud project running in. far can see sidecar difference.
service still works when deploying without kube-inject.
what can cause effect?
you may want configure access external services explained in enabling egress traffic: either kubernetes external services or use istioctl --includeipranges
exclude external traffic being controlled istio.
Comments
Post a Comment