ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Intermittent 503s during traffic peaks with healthy upstreams usually mean Envoy's circuit breakers are tripping. Here's how to confirm which counter is overflowing and fix the right limit.
Enable Istio in IBM Cloud Kubernetes Service to add observability, traffic control, and mTLS. Step‑by‑step guide, resource impact table, and trade‑offs help you decide if the service mesh is right for your workloads.
Deploy Red Hat OpenShift Service Mesh using sidecar injection to secure, observe, and make microservices resilient. This architecture note covers requirements, design, trust boundaries, operational checks, failure modes, and when to change the design.
In a Kubeflow environment utilizing Istio for authentication, the auth-proxy validates OIDC tokens at the request level. While Kubernetes RBAC manages permissions based on OIDC groups, there is a discrepancy between the identity provider's state and the active Istio session. When a user is deactivated or their credentials are rotated in the OIDC provider, th
503 Service Unavailable in Kubeflow after upgrade: Istio routing misconfiguration During a recent upgrade of a Kubeflow deployment that uses Kustomize manifests, the cluster started returning 503 Service Unavailable responses from the Ingress gateway. The issue appears to be linked to Istio’s virtual service and destination rule definitions that were regener
kubernetes
redhat
kubeflow