UNCLASSIFIED - NO CUI

Skip to content

Istio Blocking Mattermost-Gossip Service Connections

It appears that Istio is blocking intra-pod/service communications on the 8074 Gossip port, preventing the pods from joining the cluster, likely due to mTLS STRICT settings. This is being experienced in chart version 10.10.1-bb.1

The istio logs show the following: [2025-10-31T18:10:10.863Z] "- - -" 0 UF,URX - - "-" 0 0 1 - "-" "-" "-" "-" "10.x.x.x:8074" outbound|8074||mattermost gossip.mattermost.svc.cluster.local - 10.42.36.204:8074 10.x.x.x:39178 - -

Note the UF,URX flags which denote refused connections.

A workaround was to set Annotations to exclude port 8074 communications from routing via Istio (although probably not the best fix.)