{"action":"created","issue":{"url":"https://api.github.com/repos/istio/istio/issues/9142","repository_url":"https://api.github.com/repos/istio/istio","labels_url":"https://api.github.com/repos/istio/istio/issues/9142/labels{/name}","comments_url":"https://api.github.com/repos/istio/istio/issues/9142/comments","events_url":"https://api.github.com/repos/istio/istio/issues/9142/events","html_url":"https://github.com/istio/istio/issues/9142","id":366955277,"node_id":"MDU6SXNzdWUzNjY5NTUyNzc=","number":9142,"title":"Istio not reporting https traces to jaeger ","user":{"login":"kuberkaul","id":2179966,"node_id":"MDQ6VXNlcjIxNzk5NjY=","avatar_url":"https://avatars0.githubusercontent.com/u/2179966?v=4","gravatar_id":"","url":"https://api.github.com/users/kuberkaul","html_url":"https://github.com/kuberkaul","followers_url":"https://api.github.com/users/kuberkaul/followers","following_url":"https://api.github.com/users/kuberkaul/following{/other_user}","gists_url":"https://api.github.com/users/kuberkaul/gists{/gist_id}","starred_url":"https://api.github.com/users/kuberkaul/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kuberkaul/subscriptions","organizations_url":"https://api.github.com/users/kuberkaul/orgs","repos_url":"https://api.github.com/users/kuberkaul/repos","events_url":"https://api.github.com/users/kuberkaul/events{/privacy}","received_events_url":"https://api.github.com/users/kuberkaul/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2018-10-04T20:23:00Z","updated_at":"2018-10-05T18:29:00Z","closed_at":null,"author_association":"NONE","body":"**Describe the bug**\r\nWe have an container running with envoy sidecar proxy with service/deployment for port 443 using istio's own example : sample/https/nginx . We can curl the container to get nginx page just fine but see absolutely no traces in jaeger for https calls. We see http calls in jaeger as soon as we swich the port to 80 in deployment/service \r\n\r\n**Expected behavior**\r\nWe should see traces for both http/https calls to container. \r\n\r\n**Steps to reproduce the bug**\r\n- create nginx config :  https://github.com/istio/istio/blob/master/samples/https/nginx-app.yaml\r\n- Create nginx deployment : kubectl apply -f <(istioctl kube-inject -f nginx.yaml) \r\n- curl -kv https://service-ip gives 200\r\n- no traces in jaeger for https\r\n\r\n**Version**\r\n```\r\nistioctl version\r\nVersion: 1.0.2\r\nGitRevision: d639408fded355fb906ef2a1f9e8ffddc24c3d64\r\nUser: root@66ce69d4a51e\r\nHub: gcr.io/istio-release\r\nGolangVersion: go1.10.1\r\nBuildStatus: Clean\r\n\r\n[root@ip-10-147-5-150 ~]# kubectl version\r\nClient Version: version.Info{Major:\"1\", Minor:\"11\", GitVersion:\"v1.11.2\", GitCommit:\"bb9ffb1654d4a729bb4cec18ff088eacc153c239\", GitTreeState:\"clean\", BuildDate:\"2018-08-07T23:17:28Z\", GoVersion:\"go1.10.3\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\nServer Version: version.Info{Major:\"1\", Minor:\"10\", GitVersion:\"v1.10.3\", GitCommit:\"2bba0127d85d5a46ab4b778548be28623b32d0b0\", GitTreeState:\"clean\", BuildDate:\"2018-05-28T20:13:43Z\", GoVersion:\"go1.9.3\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\n```\r\n\r\n**Installation**\r\n```\r\n- kubectl apply -f install/kubernetes/helm/helm-service-account.yaml\r\n- helm init --service-account tiller\r\n- helm install install/kubernetes/helm/istio --name istio --namespace istio-system\r\n- helm upgrade --set tracing.enabled=true --set servicegraph.enabled=true --set global.configValidation=false istio install/kubernetes/helm/istio\r\n```\r\n\r\n**Environment**\r\n- Running this within AWS EKS\r\n\r\n**Cluster state**\r\n- Attached \r\n[archite.tar.gz](https://github.com/istio/istio/files/2448004/archite.tar.gz)\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/istio/istio/issues/comments/427458450","html_url":"https://github.com/istio/istio/issues/9142#issuecomment-427458450","issue_url":"https://api.github.com/repos/istio/istio/issues/9142","id":427458450,"node_id":"MDEyOklzc3VlQ29tbWVudDQyNzQ1ODQ1MA==","user":{"login":"kyessenov","id":9537734,"node_id":"MDQ6VXNlcjk1Mzc3MzQ=","avatar_url":"https://avatars2.githubusercontent.com/u/9537734?v=4","gravatar_id":"","url":"https://api.github.com/users/kyessenov","html_url":"https://github.com/kyessenov","followers_url":"https://api.github.com/users/kyessenov/followers","following_url":"https://api.github.com/users/kyessenov/following{/other_user}","gists_url":"https://api.github.com/users/kyessenov/gists{/gist_id}","starred_url":"https://api.github.com/users/kyessenov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kyessenov/subscriptions","organizations_url":"https://api.github.com/users/kyessenov/orgs","repos_url":"https://api.github.com/users/kyessenov/repos","events_url":"https://api.github.com/users/kyessenov/events{/privacy}","received_events_url":"https://api.github.com/users/kyessenov/received_events","type":"User","site_admin":false},"created_at":"2018-10-05T18:29:00Z","updated_at":"2018-10-05T18:29:00Z","author_association":"MEMBER","body":"HTTPS is treated as TCP if it is not originated by istio, since it's completely opaque to istio (by design). We can only trace requests if we originate/terminate encrypted traffic."}}
{"actor":{"display_login":"kyessenov"}}