istio-ingressgateway is only available on 8080

Solution In Progress - Updated -

Issue

When deploying the 'bookinfo' example from the documentation, I cannot access the application through TLS with the istio-ingressgateway route.

$ oc apply -n bookinfo -f https://raw.githubusercontent.com/istio/istio/release-1.1/samples/bookinfo/networking/destination-rule-all-mtls.yaml
destinationrule.networking.istio.io/productpage created
destinationrule.networking.istio.io/reviews created
destinationrule.networking.istio.io/ratings created
destinationrule.networking.istio.io/details created
$ oc get pods
NAME                              READY   STATUS    RESTARTS   AGE
details-v1-85dc45d497-8p5wl       2/2     Running   0          9m5s
productpage-v1-5fc4d7dbc9-ssjk5   2/2     Running   0          9m4s
ratings-v1-6db7864765-xbtj8       2/2     Running   0          9m5s
reviews-v1-7464fbc59d-jb5sz       2/2     Running   0          9m5s
reviews-v2-569f769b5b-k9kf8       2/2     Running   0          9m5s
reviews-v3-b8985f85d-w84p6        2/2     Running   0          9m4s

Everything deploys fine and shows up in Kiali as expected.

However, the URL is not TLS secured, as the istio-ingressgateway route is only available on port 8080, even though I deployed Service Mesh with mTLS.:

$ curl http://istio-ingressgateway-istio-system.apps.example.com/productpage
<!DOCTYPE html>
<html>
  <head>
    <title>Simple Bookstore App</title>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">

<!-- Latest compiled and minified CSS -->
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css">

<!-- Optional theme -->
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap-theme.min.css">

  </head>
  <body>

Environment

  • OpenShift 4.3

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content