gke - istio installation and deployment httpbin.

I install istio on a gke cluster using 

istioctl install --set profile=demo --skip-confirmation 

From the docs, it is also important to enable "--workload-policies=allow-net-admin" using  

gcloud container clusters update autopilot-cluster-1 --workload-policies=allow-net-admin --region=australia-southeast1

After the installation, a public ip address has been created 


Then you can see a public ip ingress has been created.


Then goto istio samples, httpbin then deploy the gateway and httpbin. You don't need to change anything here.


Using a browser, go the ip address return by this command - "kubectl get svc/istio-ingressgateway -n istio-system"



Potential issue: 

You may get error such as "Error creating: admission webhook "warden-validating.common-webhooks.networking.gke.io" denied the request: GKE Warden rejected the request because it violates one or more constraint"

Please enable workload policies - NET_ADMIN

Curious to see what happens if i delete the service by running 

kubectl delete svc/istio-ingressgateway -n istio-system

Then my public ingress ip had been removed from gcp.

Uploading: 41208 of 41208 bytes uploaded.





Comments

Post a Comment

Popular posts from this blog

gemini cli getting file not defined error

Image
 While trying to run gemini cli on my windows linux subsystem, i bump into this error here - "/Roaming/npm/node_modules/@google/gemini-cli/node_modules/undici/lib/web/webidl/index.js:512 webidl.is.File = webidl.util.MakeTypeAssertion(File)"  "ReferenceError: File is not defined" In Node.js, there’s no built-in File (until very recent Node 20+ with experimental WHATWG APIs). So, unless polyfilled, File is undefined, leading to the ReferenceError. And to resolve this, I had to upgrade to node 22 (might work for node 20) and then I was able to run it.
Read more

NodeJS: Error: spawn EINVAL in window for node version 20.20 and 18.20

Encounter this issue when running autorest (that uses nodejs).  I am using node version:  v18.20.2 After i revert to use node v18.12.0, then i was able to get my app to run without this error. Since i am working with Azure devops yaml, i was able to use the following to resolve my issue.  - task : NodeTool@0   inputs :     versionSource : 'spec'     versionSpec : '18.18.0'
Read more

vllm : Failed to infer device type

Trying to run vllm without gpu will typicaly lands you into this issue. To resolve this issue: we can use set these both. Setting one does not work for me. So i had to configure both settings below:- 1.  environment variable CUDA_VISIBLE_DEVICES = "" 2. in the command line, change to use device cpu and remove  tensor-parallel-size. For example, python3 -m vllm.entrypoints.openai.api_server --port 8080 --model deepseek-ai/DeepSeek-R1 --device cpu --trust-remote-code --max-model-len 4096" References https://docs.vllm.ai/en/latest/getting_started/troubleshooting.html#failed-to-infer-device-type
Read more