yaml
Service Mesh mTLS Not Enforced
service.*mesh.*mTLS.*PERMISSIVE.*plaintext
Fixes
- 1.Set PeerAuthentication mode to STRICT
- 2.Verify all services have sidecar proxies
- 3.Check DestinationRule TLS mode is ISTIO_MUTUAL
istiomtlsmesh
Related Errors
yaml3 fixes
Ansible SSH connection failure
ansible.*UNREACHABLE.*Failed to connect to the host via ssh
- •Verify SSH key is loaded: ssh-agent and ssh-add
- •Check ansible_host, ansible_user, ansible_ssh_private_key_file in inventory
yaml3 fixes
Ansible permission denied during task
ansible.*FAILED.*msg.*Permission denied
- •Add 'become: yes' and 'become_method: sudo' to the task/playbook
- •Ensure the ansible user has sudo privileges on the target
yaml3 fixes
Ansible sudo timeout
ansible.*FAILED.*msg.*Timeout.*waiting for privilege escalation
- •Configure NOPASSWD in sudoers for the ansible user
- •Set ansible_become_password in vault-encrypted variables