# Istio annotation not working

**URL:** <https://discuss.elastic.co/t/istio-annotation-not-working/330385>\
**Category:** Kibana\
**Created:** [April 20, 2023, 10:41am UTC](https://discuss.elastic.co/t/istio-annotation-not-working/330385 "2023-04-20T10:41:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![arun\_udaiyar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arun_udaiyar/32/119870_2.png) [@arun\_udaiyar](https://discuss.elastic.co/u/arun_udaiyar)\
**Post date:** [April 20, 2023, 10:41am UTC](https://discuss.elastic.co/t/istio-annotation-not-working/330385/1 "2023-04-20T10:41:36Z")

</div>

Hi All,  
I am trying to deploy Elasticsearch(8.5) and Kibana using helm chart.  
Elasticsearch works fine with (3 master, 2 data), but when i deploy Kibana its keep on failing, Finally found that Istio is the culprit.  
So added below annotation to Exclude tls port 9300,

```auto
podAnnotations:
  "traffic.sidecar.istio.io/excludeInboundPorts": "9300"
  "traffic.sidecar.istio.io/excludeOutboundPorts": "9300"

```

and tried with port 9200 also, but no luck. Can someone please help.

---

<div class="post-metadata">

**Author:** ![arun\_udaiyar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/arun_udaiyar/32/119870_2.png) [@arun\_udaiyar](https://discuss.elastic.co/u/arun_udaiyar)\
**Post date:** [April 20, 2023, 10:46am UTC](https://discuss.elastic.co/t/istio-annotation-not-working/330385/2 "2023-04-20T10:46:19Z")

</div>

Attaching some errors for reference,  
getting below errors on logs

```auto

"WARN", "message":"path: /_cluster/health, params: {wait_for_status=green, timeout=1s}", "ecs.version": "1.2.0","service.name":"ES_ECS","event.dataset":"elasticsearch.server","process.thread.name":"elasticsearch[elasticsearch-master-0][generic][T#2]","log.logger":"rest.suppressed","elasticsearch.node.name":"elasticsearch-master-0","elasticsearch.cluster.name":"elasticsearch","error.type":"org.elasticsearch.discovery.MasterNotDiscoveredException",

"error.message":"javax.net.ssl.SSLHandshakeException: No subject alternative names matching IP address 100.72.11.48 found","error.stack_trace":"io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: No subject alternative names matching IP address 100.72.11.48 found\n\tat

```

And getting below response for curl.

```auto
elasticsearch@elasticsearch-master-0:~$ curl -k -u elastic:Admin@123 https://localhost:9200/_cat/nodes
{"error":{"root_cause":[{"type":"master_not_discovered_exception","reason":null}],"type":"master_not_discovered_exception","reason":null},"status":503}elasticsearch@elasticsearch-master-0:~$

```

and pre-install-kibana pod throws this error

```auto

Creating a new Elasticsearch token for Kibana
Cleaning previous token
DELETE undefined failed: read ECONNRESET
Error: read ECONNRESET
    at TLSWrap.onStreamRead (node:internal/stream_base_commons:217:20) {
  errno: -104,
  code: 'ECONNRESET',
  syscall: 'read'
}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 18, 2023, 10:46am UTC](https://discuss.elastic.co/t/istio-annotation-not-working/330385/3 "2023-05-18T10:46:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.