Unable to access api exposed by istio cluster on AKS. I can see external ip and ports but unable to reach the same

Question

Followed this example

https://istio.io/latest/docs/examples/bookinfo/ Below is output from istioctl analyze

output of istioctl analyze

output of istioctl anayze

Updated port number and selector as suggested by istioctl tool. But still on dead end

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: bookinfo-gateway
spec:
  # The selector matches the ingress gateway pod labels.
  # If you installed Istio using Helm following the standard documentation, this would be "istio=ingress"
  selector:
    istio: ingress # use istio default controller
  servers:
  - port:
      number: 80
      name: http
      protocol: HTTP
    hosts:
    - "*"
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: bookinfo
spec:
  hosts:
  - "*"
  gateways:
  - bookinfo-gateway
  http:
  - match:
    - uri:
        exact: /productpage
    - uri:
        prefix: /static
    - uri:
        exact: /login
    - uri:
        exact: /logout
    - uri:
        prefix: /api/v1/products
    route:
    - destination:
        host: productpage
        port:
          number: 9080

Answer 1

Hello gera1390 your steps are correct, there is a glitch in the document. I tried the same document shared by you and found the same issue.

Downloaded istio

installed Istio

added a namespace label

kubectl label namespace default istio-injection=enabled

Deployed in bookinfo sample

kubectl apply -f [samples/bookinfo/platform/kube/bookinfo.yaml](https://raw.githubusercontent.com/istio/istio/release-1.20/samples/bookinfo/platform/kube/bookinfo.yaml)

verified the service and pods

kubectl get services
kubectl get pods

associated the bookinfo with gateway

 kubectl apply -f [samples/bookinfo/networking/bookinfo-gateway.yaml](https://raw.githubusercontent.com/istio/istio/release-1.20/samples/bookinfo/networking/bookinfo-gateway.yaml)

Analyzed it using istioctl analyze

Got the external IP

kubectl get svc istio-ingressgateway -n istio-system

Set the ingress IP and ports and exported the gateway url

export GATEWAY_URL=$INGRESS_HOST:$INGRESS_PORT

In this entire setup, I made sure there is no firewall enabled, my NSG rules are allowing port 80 and 443

Instead, you can try the below alternative options-

Option 1- localhost approach, I tried using localhost and I was able to access it over the localhost- Deployment process remains the same. You create a cluster.

Create a namespace for bookinfo

kubectl create namespace bookinfo

Deploy the application as already shown above

Once deployed, verify the pods-

Do a port forward using kubectl port-forward -n bookinfo service/productpage 9090

and access it via localhost

Option2- As per this setup Update your /etc/hosts configuration file In your /etc/hosts file, add the previous IP address to the host entries provided by the following command.

echo $(kubectl get ingress istio-system -n istio-system -o jsonpath='{..ip} {..host}') $(kubectl get ingress bookinfo -o jsonpath='{..host}')

You should have a Superuser privilege and probably use sudo to edit /etc/hosts.

and access the application’s home page from the command line:

kubectl exec $(kubectl get pod -l app=sleep -o jsonpath='{.items[0].metadata.name}') -c sleep -- curl -sS productpage:9080/productpage | grep -o "<title>.*</title>"

Reference Document-

Bookinfo sample

Getting started with istio