istio: Mixer post-install fails to complete when RBAC is disabled
When installing Istio with global.rbacEnabled=false istio-mixer-post-install keeps restarting with the following repetitive errors in failed logs:
Error from server (InternalError): error when creating "/tmp/mixer/custom-resources.yaml": Internal error occurred: failed calling admission webhook "mixer.validation.istio.io": Post https://istio-galley.istio-system.svc:443/admitmixer: x509: certificate is not valid for any names, but wanted to match istio-galley.istio-system.svc
About this issue
- Original URL
- State: closed
- Created 6 years ago
- Comments: 16 (16 by maintainers)
I thikn we should literally get rid of that option to avoid confusion. And then document that a kubernetes cluster needs to have RBAC enabled in order for Istio to work properly. (and this is Kubernetes RBAC and not Istio RBAC 😃 )