CODEWITHSUNDEEP
kubernetesistiooutbound
user399256
user399256

Reputation: 151

Istio to allow all egress traffic

How do you allow all outbound traffic with Istio?

I tried the following:

None of the options work, worth to mention I'm using kubernetes 1.11.2

Upvotes: 5

Views: 6882

Answers (3)

Bobby Donchev
Bobby Donchev

Reputation: 385

Doing **global.proxy.includeIPRanges: "0.0.0.0" ** won't work. Its probably by defualt 0.0.0.0. The global.proxy.includeIPRanges tells istio what IPs are included in the mesh and you want the opposite.

So if your k8s svc CIDR is 10.244.0.0/16 do global.proxy.includeIPRanges: "10.244.0.0/16" everything out of that range will bypass istio

Upvotes: 1

Shahaf Benita
Shahaf Benita

Reputation: 11

@user399256 if you are using helm charts you just edit that under values.yaml than you have to implement the change as explained in: this actually did anyone try to allow all traffic using global.proxy.includeIPRanges: "0.0.0.0" ? did it work? is there maybe more elegant way ?

Upvotes: -1

Rico
Rico

Reputation: 61571

I assume you followed this, that's pretty much the way to do it.

Make sure that you update the istio-sidecar-injector ConfigMap on your namespace and restart your pods.

Upvotes: 2

Related Questions