ServiceEntryAddressesRequired

Message NameServiceEntryAddressesRequired
Message CodeIST0134
DescriptionVirtual IP addresses are required for ports serving TCP (or unset) protocol when ISTIO_META_DNS_AUTO_ALLOCATE is not set on a proxy
LevelWarning

This message occurs when a ServiceEntry with the protocol field not set, or set to TCP, doesn’t have addresses defined.

Example

You will receive this message:

  1. Warning [IST0134] (ServiceEntry service-entry.default serviceentry.yaml:13) ServiceEntry addresses are required for this protocol.

When your cluster has the following ServiceEntry with unset protocol and missing addresses:

  1. apiVersion: networking.istio.io/v1
  2. kind: ServiceEntry
  3. metadata:
  4.   name: service-entry
  5.   namespace: default
  6. spec:
  7.   hosts:
  8.     - 'istio.io'
  9.   exportTo:
  10.     - "."
  11.   ports:
  12.     - number: 443
  13.       name: https
  14.   location: MESH_EXTERNAL
  15.   resolution: DNS

Another example of this analyzer is when you have a ServiceEntry with protocol: TCP and missing addresses:

  1. apiVersion: networking.istio.io/v1
  2. kind: ServiceEntry
  3. metadata:
  4.   name: service-entry
  5.   namespace: default
  6. spec:
  7.   hosts:
  8.     - 'istio.io'
  9.   exportTo:
  10.     - "."
  11.   ports:
  12.     - number: 443
  13.       name: https
  14.       protocol: TCP
  15.   location: MESH_EXTERNAL
  16.   resolution: DNS

How to resolve

Make sure to set addresses in your ServiceEntry when protocol is not set, or set to TCP. If addresses is not set, all traffic on the port defined in the ServiceEntry is matched, regardless of the host.