0

I'm running an AKS (Kubernates on Azure) cluster, with their own Istio plugin (Puts istio into aks-istio).

As a result, I've had to jump through some config hoops to redirect everything to the right namespace for Istio - everything works.

Apart from Kiali - I'm not seeing any outbound traffic beyond Pass Through Cluster.

enter image description here

I do have REGISTRY_ONLY set, and it works, as soon as I remove my Service Entries traffic stops - but I'd like to be able to see traffic out.

I presume it's because I don't have Prometheus setup correctly - as I can't find any references to PassThrough Cluster in my data - but also, no docs to help set it up.

I have two Service Monitiors setup - which bring through the bulk of my traffic - just missing the cluster.

    {
    "apiVersion": "monitoring.coreos.com/v1",
    "kind": "ServiceMonitor",
    "metadata": {
        "labels": {
            "monitoring": "istio-dataplane",
            "release": "prometheus"
        },
        "name": "prometheus-oper-istio-dataplane",
        "namespace": "monitoring",
"spec": {
    "endpoints": [
        {
            "interval": "15s",
            "path": "/stats/prometheus",
            "relabelings": [
                {
                    "action": "keep",
                    "regex": "istio-proxy",
                    "sourceLabels": [
                        "__meta_kubernetes_pod_container_name"
                    ]
                },
                {
                    "action": "keep",
                    "sourceLabels": [
                        "__meta_kubernetes_pod_annotationpresent_prometheus_io_scrape"
                    ]
                },
                {
                    "action": "replace",
                    "regex": "([^:]+)(?::\\d+)?;(\\d+)",
                    "replacement": "$1:$2",
                    "sourceLabels": [
                        "__address__",
                        "__meta_kubernetes_pod_annotation_prometheus_io_port"
                    ],
                    "targetLabel": "__address__"
                },
                {
                    "action": "keep",
                    "regex": ".*-envoy-prom",
                    "sourceLabels": [
                        "__meta_kubernetes_pod_container_port_name"
                    ]
                },
                {
                    "action": "labelmap",
                    "regex": "__meta_kubernetes_pod_label_(.+)"
                },
                {
                    "action": "replace",
                    "sourceLabels": [
                        "__meta_kubernetes_namespace"
                    ],
                    "targetLabel": "namespace"
                },
                {
                    "action": "replace",
                    "sourceLabels": [
                        "__meta_kubernetes_pod_name"
                    ],
                    "targetLabel": "pod_name"
                }
            ],
            "targetPort": "http-envoy-prom"
        }
    ],
    "jobLabel": "envoy-stats",
    "namespaceSelector": {
        "any": true
    },
    "selector": {
        "matchExpressions": [
            {
                "key": "istio-prometheus-ignore",
                "operator": "DoesNotExist"
            }
        ]
    }
}

}

{
    "apiVersion": "monitoring.coreos.com/v1",
    "kind": "ServiceMonitor",
    "metadata": {
        "labels": {
            "release": "prometheus"
        },

        "name": "prometheus-oper-istio-controlplane",
        "namespace": "monitoring",
        "resourceVersion": "1152559",
        "uid": "6c4a1080-e2ff-456c-ae86-23caaf73fe73"
    },
    "spec": {
        "endpoints": [
            {
                "interval": "15s",
                "port": "http-monitoring"
            },
            {
                "interval": "15s",
                "port": "http-policy-monitoring"
            }
        ],
        "jobLabel": "istio",
        "namespaceSelector": {
            "any": true
        },
        "selector": {
            "matchExpressions": [
                {
                    "key": "istio",
                    "operator": "In",
                    "values": [
                        "mixer",
                        "pilot",
                        "galley",
                        "citadel",
                        "sidecar-injector"
                    ]
                }
            ]
        }
    }
}

0 Answers0