This page will track all the issues and workaround or solutions to address them when Istio is deployed in ONAP with mTLS enabled.
| Pod Name | Issue | Workaround | Comments | |
|---|---|---|---|---|
| 1 | message-router-kafka | Unable to connect to zookeeper | Its seems like it is using the POD IP to connect to zookeeper, which is a headless service. | |
| 2 | message-router | message-router-kafka is not ready | Depends on 1 | |
| 3 | sdnc-dmaap-listener | message-router is not ready | Depends on 2 | |
| 4 | Http liveness probe | Mutual TLS can't work with K8S http/tcp liveness probe |
| If mutual TLS is enabled, http and tcp health checks from the kubelet will not work since they do not have Istio-issued certs. |
| 5 | ||||
| 6 | ||||
| 7 | ||||
| 8 | ||||
| 9 |