This issue may be related to istio/istio#56729 with ambient.
Previously deployed crc-ambient (synced via gitops in crc cluster) See https://github.com/trevorbox/openshift-service-mesh
tbox@fedora:~$ crc status
CRC VM: Running
OpenShift: Running (v4.20.1)
| variant: openshift | |
| version: 4.20.0 # Use the appropriate OpenShift version you are running (e.g., 4.15.0, 4.16.0) | |
| metadata: | |
| name: 99-worker-myscript-job | |
| labels: | |
| machineconfiguration.openshift.io/role: worker | |
| storage: | |
| files: | |
| # Create the script file | |
| - path: /usr/local/bin/myscript.sh |
| { | |
| "keys": [ | |
| { | |
| "use": "sig", | |
| "kty": "RSA", | |
| "kid": "8Jyn66tZ2Z7UIfzxuSuuAzb7lgVNiJr8SXSvKdeOqt0", | |
| "alg": "RS256", | |
| "n": "7w2daPMwUsxD34gE3PntA9pza1zGWCTrdTR4dhQC3X7EuZ-csNE0mvj-wGPGdxB5m__0Qv4xVdN2TXiWw_dhTDrCJZX1DviRUJUT52cNjJaYkZbAaIkegzxnjgQxj-wIwWYuOfqzo79JBrcl97kiPxxiPiX_da5apiFn7imDM8jT050THP-mMJMcgkWE9Iol62xWKZrpaHJEwjxrXyo2BaaDbwG6miEPkBnylOcqBqlMDXnvYja2YdBxZGfFyPIKPLH90joGLuAnd9iKda381gvxsy-JCMv9wng_UTt_99YhJ3hUOP_8xjHEa7GQ9D7gP9T1t8CmTxper8-4B0kmBQ", | |
| "e": "AQAB" | |
| }, |
| topologySpreadConstraints: | |
| - maxSkew: 1 | |
| topologyKey: node | |
| whenUnsatisfiable: DoNotSchedule | |
| labelSelector: | |
| matchExpressions: | |
| - key: app | |
| operator: In | |
| values: | |
| - db2ucluster-roarprds-primary |
| # tested in OSSM v2.1 | |
| # see https://github.com/istio/istio/wiki/EnvoyFilter-Samples for example this was based off of | |
| --- | |
| apiVersion: networking.istio.io/v1alpha3 | |
| kind: EnvoyFilter | |
| metadata: | |
| name: http-header-count-size-control | |
| spec: | |
| configPatches: | |
| - applyTo: CLUSTER |
| --- | |
| apiVersion: operator.gatekeeper.sh/v1alpha1 | |
| kind: Gatekeeper | |
| metadata: | |
| name: gatekeeper | |
| spec: | |
| audit: | |
| logLevel: INFO | |
| replicas: 1 | |
| image: |
| --- | |
| apiVersion: networking.istio.io/v1alpha3 | |
| kind: EnvoyFilter | |
| metadata: | |
| name: custom-header-span-x-forwarded-user | |
| namespace: istio-system | |
| spec: | |
| configPatches: | |
| - applyTo: NETWORK_FILTER | |
| match: |
| --- | |
| apiVersion: operators.coreos.com/v1alpha1 | |
| kind: Subscription | |
| metadata: | |
| name: elasticsearch-operator | |
| spec: | |
| channel: "4.3" | |
| installPlanApproval: Automatic | |
| name: elasticsearch-operator | |
| source: redhat-operators |
| --- | |
| apiVersion: maistra.io/v1 | |
| kind: ServiceMeshControlPlane | |
| metadata: | |
| name: production-install | |
| spec: | |
| version: v1.1 | |
| istio: | |
| gateways: | |
| istio-egressgateway: |
| #!/bin/bash | |
| echo "Starting job at $(date)..." | |
| OUT=$(oc get projects -o go-template=$'{{range .items}}{{with .metadata}}{{if .labels}}{{ $kiali:=("" | or (index .labels "kiali.io/member-of")) }}{{ $maistra:=("" | or (index .labels "maistra.io/member-of")) }}{{if ne $kiali $maistra}}Mismatch => project:{{.name}} kiali.io/member-of:{{$kiali}} maistra.io/member-of:{{$maistra}}\n{{end}}{{end}}{{end}}{{end}}') | |
| echo "$OUT" | |
| if [ -z "$OUT" ]; then echo "No mismatches found."; fi |