stefanprodan / istio-gke

Istio service mesh walkthrough (GKE, CloudDNS, Flagger, OpenFaaS)

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Issue with NATS MTLS exclusion

kscarlett opened this issue · comments

The last commit changed the NATS MTLS exclusion to the following:

apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
    name: "nats-no-mtls"
    namespace: {{ .Release.Namespace }}
spec:
    host: "nats.openfaas.svc.cluster.local"
    trafficPolicy:
        tls:
            mode: DISABLE

The template in the namespace causes the apply to fail in a cluster freshly set up following all the steps here.

I have been able to fix this by using the namespace "openfaas", as was used before.