UNCLASSIFIED - NO CUI

Image missing iptables-save

Summary

When using this image in an istio-injected application I see this error on istio-init:

error    failed to execute iptables-save: exec: "iptables-save": executable file not found in $PATH

Steps to reproduce

Deploy istio using this image.

Deploy an additional application that is istio injected (in order to startup istio-init).

What is the current bug behavior?

istio-init crashloops missing the iptables-save binary.

What is the expected correct behavior?

istio-init should startup.

Relevant logs and/or screenshots

error    failed to execute iptables-save: exec: "iptables-save": executable file not found in $PATH

Possible fixes

1.23 included several copies from the base image: https://repo1.dso.mil/dsop/tetrate/istio/1.23/proxyv2/-/blob/development/Dockerfile?ref_type=heads#L26-31

1.24 does not include the same ones (missing the non-ip6 copies): https://repo1.dso.mil/dsop/tetrate/istio/1.24/proxyv2/-/blob/development/Dockerfile?ref_type=heads#L26-28

Tasks

  • Bug has been identified and corrected within the container

Please read the Iron Bank Documentation for more info

Edited by Micah Nagel
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information