mirror of https://github.com/istio/istio.io.git
fail with 503 instead of 000 for injected-app (#3162)
As a bad destination rule is set to disable client side mTLS and receiving side is mTLS enabled. At this point, Running the curl command between sidecar injected Istio services all requests will fail with a 503 error code as the client side is still using plain-text.
This commit is contained in:
parent
4789fb064c
commit
e94ec58cb9
|
@ -125,8 +125,7 @@ You can also confirm that requests from `sleep` to `httpbin` are now failed:
|
|||
|
||||
{{< text bash >}}
|
||||
$ kubectl exec $(kubectl get pod -l app=sleep -o jsonpath={.items..metadata.name}) -c sleep -- curl httpbin:8000/headers -o /dev/null -s -w '%{http_code}\n'
|
||||
000
|
||||
command terminated with exit code 56
|
||||
503
|
||||
{{< /text >}}
|
||||
|
||||
Before you continue, remove the bad destination rule to make mutual TLS work again with the following command:
|
||||
|
|
Loading…
Reference in New Issue