ServiceEntryAddressesRequired

Message NameServiceEntryAddressesRequired
Message CodeIST0134
DescriptionVirtual IP addresses are required for ports serving TCP (or unset) protocol when ISTIO_META_DNS_AUTO_ALLOCATE is not set on a proxy
LevelWarning

This message occurs when a ServiceEntry with the protocol field not set, or set to TCP, doesn’t have addresses defined.

Example

You will receive this message:

Warning [IST0134] (ServiceEntry service-entry.default serviceentry.yaml:13) ServiceEntry addresses are required for this protocol.

When your cluster has the following ServiceEntry with unset protocol and missing addresses:

apiVersion: networking.istio.io/v1 kind: ServiceEntry metadata: name: service-entry namespace: default spec: hosts: - 'istio.io' exportTo: - "." ports: - number: 443 name: https location: MESH_EXTERNAL resolution: DNS

Another example of this analyzer is when you have a ServiceEntry with protocol: TCP and missing addresses:

apiVersion: networking.istio.io/v1 kind: ServiceEntry metadata: name: service-entry namespace: default spec: hosts: - 'istio.io' exportTo: - "." ports: - number: 443 name: https protocol: TCP location: MESH_EXTERNAL resolution: DNS

How to resolve

Make sure to set addresses in your ServiceEntry when protocol is not set, or set to TCP. If addresses is not set, all traffic on the port defined in the ServiceEntry is matched, regardless of the host.