Hi Sylvian, On 07.11.2019 11:39, Sylvain Desbureaux via Lists.Onap.Org wrote: > Sorry, bad mail address > > --- > > Sylvain Desbureaux > > *De : *DESBUREAUX Sylvain TGI/OLN <[email protected]> > *Date : *jeudi 7 novembre 2019 à 11:38 > *À : *"[email protected]" <[email protected]> > *Cc : *"[email protected]" <[email protected]>, > "[email protected]" <[email protected]> > *Objet : *[ONA][AAF] AAF with Istio/linkerd > > Hello Jonathan, > > I’m trying to make work ONAP on a kubernetes with service mesh (linkerd, > istio and consul connect as service mesh). > > As these service meshes add “sidecars” to PODs, every requests sent to > the pod is intercepted by the sidecar and sent back from the sidecar. It > means that you need to listen on 127.0.0.1 and not on the public ip. > > Today, aaf-locate (and maybe others 😉) are listening on public ip. I’ve > taken a look at the configuration and at the code and I don’t see if > it’s possible to listen to 127.0.0.1 and if yes how to “tell” aaf-locate > to do so… > > I’ve seen that in > auth/auth-core/src/main/java/org/onap/aaf/auth/server/AbsServiceStarter.java, > we use the hostname but I’m not sure how to “force” to 127.0.0.1.
You don't need to force the localhost, you can just make sure that it listens on all available interfaces (0.0.0.0) which shouldn't break anything and then make it work also with istio;) -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#19373): https://lists.onap.org/g/onap-discuss/message/19373 Mute This Topic: https://lists.onap.org/mt/45686190/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
