Skip to content

Improper DNS handling of wildcard SE with fqdn endpoints #1485

@howardjohn

Description

@howardjohn
apiVersion: networking.istio.io/v1
kind: ServiceEntry
metadata:
  name: external-svc-https
  namespace: egress
spec:
  addresses: [240.240.1.1] # Workaround auto-allocator ignoring the wildcard host
  endpoints:
  - address: httpbin.org # Always resolve this
  hosts:
  - '*.httpbin.org' # match this
  location: MESH_EXTERNAL
  ports:
  - number: 80
    name: http
    protocol: HTTP
  resolution: DNS

This doesn't resolve properly. TODO: add some details, wanted to write this before I forgot

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions