Hi Krzysztof, I agree but I also don't know how to do it in aaf ^_^. --- Sylvain Desbureaux
Le 07/11/2019 11:43, « Krzysztof Opasiak » <[email protected]> a écrit : Hi Sylvian, On 07.11.2019 11:39, Sylvain Desbureaux via Lists.Onap.Org wrote: > Sorry, bad mail address > > --- > > Sylvain Desbureaux > > *De : *DESBUREAUX Sylvain TGI/OLN <[email protected]> > *Date : *jeudi 7 novembre 2019 à 11:38 > *À : *"[email protected]" <[email protected]> > *Cc : *"[email protected]" <[email protected]>, > "[email protected]" <[email protected]> > *Objet : *[ONA][AAF] AAF with Istio/linkerd > > Hello Jonathan, > > I’m trying to make work ONAP on a kubernetes with service mesh (linkerd, > istio and consul connect as service mesh). > > As these service meshes add “sidecars” to PODs, every requests sent to > the pod is intercepted by the sidecar and sent back from the sidecar. It > means that you need to listen on 127.0.0.1 and not on the public ip. > > Today, aaf-locate (and maybe others 😉) are listening on public ip. I’ve > taken a look at the configuration and at the code and I don’t see if > it’s possible to listen to 127.0.0.1 and if yes how to “tell” aaf-locate > to do so… > > I’ve seen that in > auth/auth-core/src/main/java/org/onap/aaf/auth/server/AbsServiceStarter.java, > we use the hostname but I’m not sure how to “force” to 127.0.0.1. You don't need to force the localhost, you can just make sure that it listens on all available interfaces (0.0.0.0) which shouldn't break anything and then make it work also with istio;) -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics _________________________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#19374): https://lists.onap.org/g/onap-discuss/message/19374 Mute This Topic: https://lists.onap.org/mt/45686190/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
