"pilot.validation.istio.io" fails on GKE

8/17/2021

I enabled Istio on GKE using istio-addon. According to the images the version of Istio is 1.6. Deployment of the application, which contains RequestAuthentication resource gives the following error:

 admission webhook "pilot.validation.istio.io" denied the request:
 unrecognized type RequestAuthentication

RequestAuthentication must be available in the version 1.6. Is there any way to check the compatibility?

Updated: On my on-premise installation everything works with Istio 1.9. The configuration is the following:

apiVersion: security.istio.io/v1beta1
kind: RequestAuthentication
metadata: 
  name: xxx-auth
spec:
  selector:
    matchLabels:
      app: xxx-fe
  jwtRules:
  - issuer:  "{{ .Values.idp.issuer }}"
    jwksUri: "{{ .Values.idp.jwksUri }}"
-- Katya Gorshkova
google-cloud-platform
istio
kubernetes

1 Answer

8/30/2021

I have posted community wiki answer for better visibility.

As Katya Gorshkova has mentioned in the comment:

Finally, I turned off istio addon and installed the newest istio 1.11.1. It worked without any problems

See also

-- Mikołaj Głodziak
Source: StackOverflow