ServiceEntryAddressesRequired

This message occurs when a ServiceEntry with the protocol field not set, or set to TCP, doesn’t have addresses defined.

Example

You will receive this message:

Warning [IST0134] (ServiceEntry service-entry.default serviceentry.yaml:13) ServiceEntry addresses are required for this protocol.

When your cluster has the following ServiceEntry with unset protocol and missing addresses:

apiVersion: networking.istio.io/v1 kind: ServiceEntry metadata:   name: service-entry   namespace: default spec:   hosts:     - 'istio.io'   exportTo:     - "."   ports:     - number: 443       name: https   location: MESH_EXTERNAL   resolution: DNS

Another example of this analyzer is when you have a ServiceEntry with protocol: TCP and missing addresses:

apiVersion: networking.istio.io/v1 kind: ServiceEntry metadata:   name: service-entry   namespace: default spec:   hosts:     - 'istio.io'   exportTo:     - "."   ports:     - number: 443       name: https       protocol: TCP   location: MESH_EXTERNAL   resolution: DNS

How to resolve

Make sure to set addresses in your ServiceEntry when protocol is not set, or set to TCP. If addresses is not set, all traffic on the port defined in the ServiceEntry is matched, regardless of the host.