[GitHub] [lucene-solr-operator] sylus commented on pull request #221: Work with basic-auth enabled SolrCloud clusters

[GitBox <gi...@apache.org>]

sylus commented on pull request #221:
URL: https://github.com/apache/lucene-solr-operator/pull/221#issuecomment-783563280


   Hi there I ended up testing this P.R. and it works great in a non Istio enabled namespace.
   
   However the problem is with the solr-zk-setup init container when is in an istio enabled namespace as there is no network connectivity.
   
   The Istio CNI plugin may cause networking connectivity problems for any application initContainers. When using Istio CNI kubelet starts an injected pod with the following steps:
   
   1. The Istio CNI plugin sets up traffic redirection to the Istio sidecar proxy within the pod
   2. All init containers execute and complete successfully
   3. The Istio sidecar proxy starts in the pod along with the pods other containers
   
   Init containers execute before the sidecar proxy starts, which can results in traffic loss during their exection. Some workarounds include:
   
   a) Set the traffic.sidecar.istio.io/excludeOutboundIPRanges
   b) Set the traffic.sidecar.istio.io/excludeOutboundPorts
   c) Running initContainers as user 1337 since that bypasses Istio
   
   I am waiting for zookeeper-operator to allow for custom annotations to be passed then this should work.
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org