{"action":"created","issue":{"url":"https://api.github.com/repos/istio/istio/issues/7025","repository_url":"https://api.github.com/repos/istio/istio","labels_url":"https://api.github.com/repos/istio/istio/issues/7025/labels{/name}","comments_url":"https://api.github.com/repos/istio/istio/issues/7025/comments","events_url":"https://api.github.com/repos/istio/istio/issues/7025/events","html_url":"https://github.com/istio/istio/issues/7025","id":340410535,"node_id":"MDU6SXNzdWUzNDA0MTA1MzU=","number":7025,"title":"Issues with Calico (NetworkPolicy) and Istio","user":{"login":"Stono","id":1486729,"node_id":"MDQ6VXNlcjE0ODY3Mjk=","avatar_url":"https://avatars2.githubusercontent.com/u/1486729?v=4","gravatar_id":"","url":"https://api.github.com/users/Stono","html_url":"https://github.com/Stono","followers_url":"https://api.github.com/users/Stono/followers","following_url":"https://api.github.com/users/Stono/following{/other_user}","gists_url":"https://api.github.com/users/Stono/gists{/gist_id}","starred_url":"https://api.github.com/users/Stono/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Stono/subscriptions","organizations_url":"https://api.github.com/users/Stono/orgs","repos_url":"https://api.github.com/users/Stono/repos","events_url":"https://api.github.com/users/Stono/events{/privacy}","received_events_url":"https://api.github.com/users/Stono/received_events","type":"User","site_admin":false},"labels":[{"id":971613641,"node_id":"MDU6TGFiZWw5NzE2MTM2NDE=","url":"https://api.github.com/repos/istio/istio/labels/stale","name":"stale","color":"b60205","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-07-11T21:22:22Z","updated_at":"2018-11-20T04:19:05Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"Hey, \r\nWe're currently trying to enable Calico NetworkPolicy for services which are currently part of our Istio mesh.  What we're seeing is rules gradually be applied, take this example..  I missed out a required inbound rule, and as you can see, gradually over time we start to see failures.\r\n\r\n<img width=\"408\" alt=\"screen shot 2018-07-11 at 22 18 25\" src=\"https://user-images.githubusercontent.com/1486729/42599976-c9ea0fc4-8558-11e8-8917-99ccf42b199b.png\">\r\n\r\nIt feels to me like NetworkPolicy, when envoy is in play, is only being applied to new connections rather than existing ones, and envoy is doing some keep alive (can anyone confirm this)?\r\n\r\nI also feel this *may* be a duplicate of https://github.com/istio/istio/issues/5815, but i'd like someone with a bit more understanding of istios interaction with Calico to confirm.\r\n\r\nTa"},"comment":{"url":"https://api.github.com/repos/istio/istio/issues/comments/440132671","html_url":"https://github.com/istio/istio/issues/7025#issuecomment-440132671","issue_url":"https://api.github.com/repos/istio/istio/issues/7025","id":440132671,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0MDEzMjY3MQ==","user":{"login":"stale[bot]","id":26384082,"node_id":"MDM6Qm90MjYzODQwODI=","avatar_url":"https://avatars3.githubusercontent.com/in/1724?v=4","gravatar_id":"","url":"https://api.github.com/users/stale%5Bbot%5D","html_url":"https://github.com/apps/stale","followers_url":"https://api.github.com/users/stale%5Bbot%5D/followers","following_url":"https://api.github.com/users/stale%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/stale%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/stale%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stale%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/stale%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/stale%5Bbot%5D/repos","events_url":"https://api.github.com/users/stale%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/stale%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2018-11-20T04:19:05Z","updated_at":"2018-11-20T04:19:05Z","author_association":"NONE","body":"This issue has been automatically closed because it has not had activity in the last month and a half. If this issue is still valid, please ping a maintainer and ask them to label it as \"help wanted\". Thank you for your contributions.\n"}}
{"actor":{"display_login":"stale"}}