Unable to start istio-ingressgateway when restarting the cluster (virtual machine)?¶
The error message is as shown in the following image:
Possible cause: The jwtsUri address of the RequestAuthentication CR cannot be accessed, causing istiod to be unable to push the configuration to istio-ingressgateway (This bug can be avoided in Istio 1.15: https://github.com/istio/istio/pull/39341/).
Solution:
-
Backup the RequestAuthentication ghippo CR.
-
Delete the RequestAuthentication ghippo CR.
-
Restart Istio.
-
Reapply the RequestAuthentication ghippo CR.
Note
Before applying the RequestAuthentication ghippo CR, make sure that ghippo-apiserver and ghippo-keycloak are started correctly.