istioctl x proxy-status via istio agents.#40623
Conversation
2c7af56 to
3e1aa6f
Compare
3e1aa6f to
c36f181
Compare
0290557 to
751224d
Compare
eecfec6 to
7d21e6f
Compare
|
@therealmitchconnors Wam reminder |
7d21e6f to
e2a7cad
Compare
|
To wait for #40721, I set this to |
|
As #40721 supports the 15004 port as well, don't need to wait for the PR. |
e2a7cad to
0fa5de9
Compare
Co-authored-by: John Howard <[email protected]>
6901a76 to
ff19141
Compare
|
/retest |
* `istioctl ps` via istio agents. * Fix lint errors * Fix lint errors * Use k8s client_go instead of RESTClient * Update pkg/kube/client.go Co-authored-by: John Howard <[email protected]> * Use constant for "status.phase=Running" * Use the revision in the annotation instead of labels for the injected pods * Add xds-via-agents-limit flag * Reflect the comments and refactoring Co-authored-by: John Howard <[email protected]>
* `istioctl ps` via istio agents. * Fix lint errors * Fix lint errors * Use k8s client_go instead of RESTClient * Update pkg/kube/client.go Co-authored-by: John Howard <[email protected]> * Use constant for "status.phase=Running" * Use the revision in the annotation instead of labels for the injected pods * Add xds-via-agents-limit flag * Reflect the comments and refactoring Co-authored-by: John Howard <[email protected]>
|
/cherrypick release-1.15 |
|
@ingwonsong: #40623 failed to apply on top of branch "release-1.15": DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
@ingwonsong: new issue created for failed cherrypick: #41040 DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
* `istioctl ps` via istio agents. * Fix lint errors * Fix lint errors * Use k8s client_go instead of RESTClient * Update pkg/kube/client.go Co-authored-by: John Howard <[email protected]> * Use constant for "status.phase=Running" * Use the revision in the annotation instead of labels for the injected pods * Add xds-via-agents-limit flag * Reflect the comments and refactoring Co-authored-by: John Howard <[email protected]> Co-authored-by: John Howard <[email protected]>
* `istioctl ps` via istio agents. * Fix lint errors * Fix lint errors * Use k8s client_go instead of RESTClient * Update pkg/kube/client.go Co-authored-by: John Howard <[email protected]> * Use constant for "status.phase=Running" * Use the revision in the annotation instead of labels for the injected pods * Add xds-via-agents-limit flag * Reflect the comments and refactoring Co-authored-by: John Howard <[email protected]>
* Send only the Cluster ID (#40477) * Add Tap gRPC handler to Istio Agent. (#40566) * Add Tap GRPC handler to Istio Agent. * Fix lint errors * Add the integration test * `istioctl x proxy-status` via istio agents. (#40623) * `istioctl ps` via istio agents. * Fix lint errors * Fix lint errors * Use k8s client_go instead of RESTClient * Update pkg/kube/client.go Co-authored-by: John Howard <[email protected]> * Use constant for "status.phase=Running" * Use the revision in the annotation instead of labels for the injected pods * Add xds-via-agents-limit flag * Reflect the comments and refactoring Co-authored-by: John Howard <[email protected]> Co-authored-by: John Howard <[email protected]>
* `istioctl ps` via istio agents. * Fix lint errors * Fix lint errors * Use k8s client_go instead of RESTClient * Update pkg/kube/client.go Co-authored-by: John Howard <[email protected]> * Use constant for "status.phase=Running" * Use the revision in the annotation instead of labels for the injected pods * Add xds-via-agents-limit flag * Reflect the comments and refactoring Co-authored-by: John Howard <[email protected]>
This PR proposes an experimental option
--xds-via-agentsonly foristioctl x proxy-statuscommand, which sends a query foristioctl x proxy-statusvia istio agents, instead of direct query toistiod.istioctl x proxy-statustry to find all the istiod instances by searching pods inistio-systemnamespace.But, if we use the external istiods, this way may not work.
For example,
istiodcan be deployed in the other cluster or out of K8S. Moreover, in front of the istiod instances, some sort of load balancer can be set to distribute the connections to multiple istiods. This kind of configuration may happen when the customer want to isolate their control plane from the workloads, or when they are using some managed control plane.In such case,
istioctl x proxy-statuscannot enumerate and access to each istiod instance directly. So, this PR proposes to accessistiodvia "istio agent".Please note that, by #40566, we can make a query to istiod via istio agents efficiently.