Debugging the Istio agent

In this section, we will read how to troubleshoot any issues in the data plane caused by the misconfiguration of the Istio agent. An Istio agent may not act as expected due to a multitude of reasons; in this section, we will discuss various options to debug and troubleshoot such issues.

The following command can be used to inspect the initial bootstrap configuration file that is used by Envoy to start itself and connect with istiod:

$ istioctl proxy-config bootstrap envoydummy -n chapter11 -o json >bootstrap-envoydummy.json

The bootstrap configuration is composed of the information provided by the Istiod controller during sidecar injection via validation and the sidecar injection webhook.

We can check the certificate and secret configured for Envoy by istio-agent using the following command:

% istioctl proxy-config secret envoydummy -n chapter11
RESOURCE NAME     TYPE        ...