istio-ingressgateway is only available on 8080
Issue
When deploying the 'bookinfo' example from the documentation, I cannot access the application through TLS with the istio-ingressgateway route.
$ oc apply -n bookinfo -f https://raw.githubusercontent.com/istio/istio/release-1.1/samples/bookinfo/networking/destination-rule-all-mtls.yaml
destinationrule.networking.istio.io/productpage created
destinationrule.networking.istio.io/reviews created
destinationrule.networking.istio.io/ratings created
destinationrule.networking.istio.io/details created
$ oc get pods
NAME READY STATUS RESTARTS AGE
details-v1-85dc45d497-8p5wl 2/2 Running 0 9m5s
productpage-v1-5fc4d7dbc9-ssjk5 2/2 Running 0 9m4s
ratings-v1-6db7864765-xbtj8 2/2 Running 0 9m5s
reviews-v1-7464fbc59d-jb5sz 2/2 Running 0 9m5s
reviews-v2-569f769b5b-k9kf8 2/2 Running 0 9m5s
reviews-v3-b8985f85d-w84p6 2/2 Running 0 9m4s
Everything deploys fine and shows up in Kiali as expected.
However, the URL is not TLS secured, as the istio-ingressgateway
route is only available on port 8080, even though I deployed Service Mesh with mTLS.:
$ curl http://istio-ingressgateway-istio-system.apps.example.com/productpage
<!DOCTYPE html>
<html>
<head>
<title>Simple Bookstore App</title>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<!-- Latest compiled and minified CSS -->
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css">
<!-- Optional theme -->
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap-theme.min.css">
</head>
<body>
Environment
- OpenShift 4.3
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.