Search code examples
kubernetesgoogle-cloud-platformistio

"pilot.validation.istio.io" fails on GKE


I enabled Istio on GKE using istio-addon. According to the images the version of Istio is 1.6. Deployment of the application, which contains RequestAuthentication resource gives the following error:

 admission webhook "pilot.validation.istio.io" denied the request:
 unrecognized type RequestAuthentication

RequestAuthentication must be available in the version 1.6. Is there any way to check the compatibility?

Updated: On my on-premise installation everything works with Istio 1.9. The configuration is the following:

apiVersion: security.istio.io/v1beta1
kind: RequestAuthentication
metadata: 
  name: xxx-auth
spec:
  selector:
    matchLabels:
      app: xxx-fe
  jwtRules:
  - issuer:  "{{ .Values.idp.issuer }}"
    jwksUri: "{{ .Values.idp.jwksUri }}"

Solution

  • I have posted community wiki answer for better visibility.

    As Katya Gorshkova has mentioned in the comment:

    Finally, I turned off istio addon and installed the newest istio 1.11.1. It worked without any problems

    See also