istio: kiali doesn't work out of box in istio 1.3

Unable to reach Kiali UI:

istioctl dashboard kiali is pointing to http address of kiali (http://localhost:59157/kiali) which failed with Client sent an HTTP request to an HTTPS server. same error if i use port-forwarding - http://localhost:20001/kiali/console

Kiali team suggested we should move up kiali to 1.3 or 1.4.

[ ] Configuration Infrastructure [ ] Docs [ ] Installation [ ] Networking [ ] Performance and Scalability [x ] Policies and Telemetry [ ] Security [ ] Test and Release [ x] User Experience [ ] Developer Infrastructure

Expected behavior

Steps to reproduce the bug

Version (include the output of istioctl version --remote and kubectl version)

How was Istio installed?

Environment where bug was observed (cloud vendor, OS, etc)

Additionally, please consider attaching a cluster state archive by attaching the dump file to this issue.

About this issue

Original URL
State: closed
Created 5 years ago
Comments: 20 (18 by maintainers)

Most upvoted comments

Error: meshpolicies.authentication.istio.io is forbidden: User “system:serviceaccount:istio-system:kiali-service-account” cannot list resource “meshpolicies” in API group “authentication.istio.io” at the cluster scope

That is a different issue than the http vs. https thing. That was the bug fix that was put in recently: https://github.com/kiali/kiali/issues/1337

jmazzitelli on Sep 16, 2019

Kiali works with Istio 1.3 out of the box if you configure it by passing --set kiali.security.enabled=false. Someone change the default to have security enabled (which sets the identity.cert_file) but we haven’t updated our docs/istioctl to ues https so we should have that set.

howardjohn on Sep 10, 2019