Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Requests don't make it through the activator on AKS #3026

Open
krancour opened this issue Jan 29, 2019 · 5 comments

Comments

Projects
None yet
4 participants
@krancour
Copy link
Member

commented Jan 29, 2019

Expected Behavior

Requests that are served by the activator eventually receive the same response as if they'd been served directly by the target application.

Actual Behavior

On AKS, requests that are served by the activator timeout without ever receiving a response.

Steps to Reproduce the Problem

  1. Follow Knative Install on Azure Kubernetes Service (AKS), with some amendments:

    1. Install Istio as prescribed

    2. Get the external DNS name of your apiserver:

      $ az aks show -n <cluster name> -g <resource group> -o table
      
    3. Work around istio/istio#8696 using the following manifest:

      apiVersion: networking.istio.io/v1alpha3
      kind: ServiceEntry
      metadata:
        name: azmk8s-ext
      spec:
        hosts:
        - <apiserver external dns name>
        location: MESH_EXTERNAL
        ports:
        - number: 443
          name: https
          protocol: HTTPS
        resolution: DNS
      ---
      apiVersion: networking.istio.io/v1alpha3
      kind: VirtualService
      metadata:
        name: tls-routing
      spec:
        hosts:
        - <apiserver external dns name>
        tls:
        - match:
          - port: 443
            sniHosts:
            - <apiserver external dns name>
          route:
          - destination:
              host: <apiserver external dns name>
      
    4. Install Knative as prescribed

  2. Follow Getting Started with Knative App Deployment

  3. Wait for the application to be scaled to zero.

  4. Make a request to the application. Observe a new application pod is successfully activated, but the request times out without receiving any response.

Additional Info

@tcnghia

This comment has been minimized.

Copy link
Contributor

commented Jan 31, 2019

@krancour does this work using istio-lean.yaml? Thanks

@krancour

This comment has been minimized.

Copy link
Member Author

commented Jan 31, 2019

@tcnghia, not sure. Wasn't obvious to me that this was Istio related, so I didn't think to try that, but I'll give it a shot.

@mattmoor

This comment has been minimized.

Copy link
Member

commented Feb 7, 2019

@krancour Any luck?

@krancour

This comment has been minimized.

Copy link
Member Author

commented Feb 8, 2019

@mattmoor, nope. :( Unfortunately, I haven't had time to dig into this yet.

@mattmoor

This comment has been minimized.

Copy link
Member

commented Apr 26, 2019

Planning for 0.7, so I'll give this another ping :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.