你有
Targets: Name: hello.agud.svc.cluster.local
在我指定端口之前,我尝试过和你一样的问题。文档说不需要指定端口,但将其留空并不适合我。
我在这个例子中使用Bookinfo:
cat <<EOF | kubectl apply -f - apiVersion: authentication.istio.io/v1alpha1 kind: Policy metadata: name: jwt-hello namespace: default spec: origins: - jwt: issuer: "628645741881-noabiu23f5a8m8ovd8ucv698lj78vv0l@developer.gserviceaccount.com" jwksUri: "https://www.googleapis.com/service_accounts/v1/jwk/628645741881-noabiu23f5a8m8ovd8ucv698lj78vv0l@developer.gserviceaccount.com" principalBinding: USE_ORIGIN targets: - name: productpage ports: - number: 9080 EOF