ReferencedInternalGateway

This message occurs when a VirtualService refers to an internal Gateway that Istio generates from a Kubernetes Gateway API Gateway.

The names of these internal gateways contain ~istio-autogenerated-k8s-gateway~. They are an implementation detail of Istio. Their names can change, and you must not refer to them.

An example

Consider this VirtualService:

apiVersion: networking.istio.io/v1
kind: VirtualService
metadata:
  name: httpbin
spec:
  hosts:
  - httpbin.example.com
  gateways:
  - istio-system/gateway-istio-autogenerated-k8s-gateway-default
  http:
  - route:
    - destination:
        host: httpbin

You will receive a message like this:

Warning [IST0165] (VirtualService default/httpbin) Gateway reference in VirtualService default/httpbin is to an implementation-generated internal Gateway: istio-system/gateway-istio-autogenerated-k8s-gateway-default.

How to resolve

Do one of these:

  • Use an HTTPRoute that refers to the Kubernetes Gateway API Gateway.
  • Create an Istio Gateway resource and refer to it from the VirtualService.