{"action":"created","issue":{"url":"https://api.github.com/repos/hazelcast/hazelcast-kubernetes/issues/160","repository_url":"https://api.github.com/repos/hazelcast/hazelcast-kubernetes","labels_url":"https://api.github.com/repos/hazelcast/hazelcast-kubernetes/issues/160/labels{/name}","comments_url":"https://api.github.com/repos/hazelcast/hazelcast-kubernetes/issues/160/comments","events_url":"https://api.github.com/repos/hazelcast/hazelcast-kubernetes/issues/160/events","html_url":"https://github.com/hazelcast/hazelcast-kubernetes/issues/160","id":474665961,"node_id":"MDU6SXNzdWU0NzQ2NjU5NjE=","number":160,"title":"Istio with mTLS","user":{"login":"jakubigla","id":204480,"node_id":"MDQ6VXNlcjIwNDQ4MA==","avatar_url":"https://avatars2.githubusercontent.com/u/204480?v=4","gravatar_id":"","url":"https://api.github.com/users/jakubigla","html_url":"https://github.com/jakubigla","followers_url":"https://api.github.com/users/jakubigla/followers","following_url":"https://api.github.com/users/jakubigla/following{/other_user}","gists_url":"https://api.github.com/users/jakubigla/gists{/gist_id}","starred_url":"https://api.github.com/users/jakubigla/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jakubigla/subscriptions","organizations_url":"https://api.github.com/users/jakubigla/orgs","repos_url":"https://api.github.com/users/jakubigla/repos","events_url":"https://api.github.com/users/jakubigla/events{/privacy}","received_events_url":"https://api.github.com/users/jakubigla/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-07-30T15:51:08Z","updated_at":"2019-08-05T15:13:26Z","closed_at":null,"author_association":"NONE","body":"I have a K8s cluster with Istio (1.2.2) that has mTLS enabled. I'm using headless service for communication.\r\n\r\nUnfortunately it doesn't work. My java service is throwing this (which btw shows correct pod IPs): \r\n\r\n```\r\n2019-07-30 15:43:10.735  WARN 1 --- [.IO.thread-in-2] com.hazelcast.nio.tcp.TcpIpConnection    : [10.252.0.75]:5701 [dev] [3.11.1] Connection[id=12, /10.252.0.75:39675->/10.252.0.103:5701, endpoint=[10.252.0.103]:5701, alive=false, type=NONE] closed. Reason: Exception in Connection[id=12, /10.252.0.75:39675->/10.252.0.103:5701, endpoint=[10.252.0.103]:5701, alive=true, type=NONE], thread=hz._hzInstance_1_dev.IO.thread-in-2\r\n java.io.IOException: Connection reset by peer\r\n```\r\n\r\nand istio-proxy container is showing this:\r\n`[2019-07-30T15:43:10.731Z] \"- - -\" 0 UF,URX \"-\" \"-\" 0 0 4 - \"-\" \"-\" \"-\" \"-\" \"10.252.0.103:5701\" outbound|5701||hazelcast.some-namespace.svc.cluster.local - 10.252.0.103:5701 10.252.0.75:39675 -`\r\n\r\nThe updated readme file of this repo says, that this should work without extra configuration. \r\n"},"comment":{"url":"https://api.github.com/repos/hazelcast/hazelcast-kubernetes/issues/comments/518275779","html_url":"https://github.com/hazelcast/hazelcast-kubernetes/issues/160#issuecomment-518275779","issue_url":"https://api.github.com/repos/hazelcast/hazelcast-kubernetes/issues/160","id":518275779,"node_id":"MDEyOklzc3VlQ29tbWVudDUxODI3NTc3OQ==","user":{"login":"jakubigla","id":204480,"node_id":"MDQ6VXNlcjIwNDQ4MA==","avatar_url":"https://avatars2.githubusercontent.com/u/204480?v=4","gravatar_id":"","url":"https://api.github.com/users/jakubigla","html_url":"https://github.com/jakubigla","followers_url":"https://api.github.com/users/jakubigla/followers","following_url":"https://api.github.com/users/jakubigla/following{/other_user}","gists_url":"https://api.github.com/users/jakubigla/gists{/gist_id}","starred_url":"https://api.github.com/users/jakubigla/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jakubigla/subscriptions","organizations_url":"https://api.github.com/users/jakubigla/orgs","repos_url":"https://api.github.com/users/jakubigla/repos","events_url":"https://api.github.com/users/jakubigla/events{/privacy}","received_events_url":"https://api.github.com/users/jakubigla/received_events","type":"User","site_admin":false},"created_at":"2019-08-05T15:13:26Z","updated_at":"2019-08-05T15:13:26Z","author_association":"NONE","body":"I have spotted that the other instance responds with:\r\n\r\n`INFO 1 --- [.IO.thread-in-0] com.hazelcast.nio.tcp.TcpIpConnection    : [10.252.0.12]:5701 [dev] [3.11.1] Connection[id=31, /10.252.0.12:5701->/10.252.0.41:48746, endpoint=null, alive=false, type=NONE] closed. Reason: Memcached or SSL not enabled`"}}
{"actor":{"display_login":"jakubigla"}}