Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow Prometheus -> ztunnel scraping to be HBONE #928

Open
howardjohn opened this issue Apr 16, 2024 · 1 comment
Open

Allow Prometheus -> ztunnel scraping to be HBONE #928

howardjohn opened this issue Apr 16, 2024 · 1 comment

Comments

@howardjohn
Copy link
Member

We should ideally allow ztunnel itself to be a HBONE accepting workload, so traffic directly to "Ztunnel the workload" accepts HBONE.

Notably here is Prometheus, though others probably apply

This may be more complex than its worth, so lets hold this unless there is a clean approach
@howardjohn
Copy link
Member Author

Currently you actually cannot even call ztunnel at all. Sending a fix

howardjohn added a commit to howardjohn/ztunnel that referenced this issue Apr 17, 2024
@howardjohn
block illegal calls in inpod mode
49399bd 
Part of istio#928

This removes the obsolete call protections for inpod, and adds
equivilents
@howardjohn howardjohn mentioned this issue Apr 17, 2024
Merged
istio-testing pushed a commit that referenced this issue Apr 18, 2024
@howardjohn
block illegal calls in inpod mode (#935)
a2b2393 
Part of #928

This removes the obsolete call protections for inpod, and adds
equivilents
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@howardjohn