Unable to use custom-metrics apiservice if custom-metrics application is behind istio

General Discussions
1

Hi, My custom-metrics apiservice is unable to connect to my custom-metrics service as istio-sidecar is injected into it. Find the error message below.

failing or missing response from https://xx.xx.xx.xx:4443/apis/custom.metrics.k8s.io/v1beta1: Get “https://xx.xx.xx.xx:4443/apis/custom.metrics.k8s.io/v1beta1”: remote error: tls: unknown certificate authority

I think istio has tls enablement which is causing the issue. How to solve it?

In apiservice “caBundle” option is present but does istio give us this “caBundle” or how to get it?

Kindly help in overcoming the issue.

Cluster information:

Kubernetes version: v1.20.11

2

The same issue here… but for kubectl exec calls