Hello!! Someone have experience using hydra with istio? Right now my problem is that the virtualservice is not configuring the headers i provide, this is the definition (we are using TLS termination):

---
apiVersion: <http://networking.istio.io/v1beta1|networking.istio.io/v1beta1>
kind: VirtualService
metadata:
  name: {{ include "hydra.fullname" . }}-vs-admin-internal
spec:
  hosts:
  - hydra-admin.ory.svc.cluster.local
  gateways:
  - mesh
  http:
  - headers:
      request:
        set:
          X-Forwarded-Proto: "https"
    route:
    - destination:
        host: hydra-admin.ory.svc.cluster.local
        port:
          number: 4445

Using curl directly to this endpoint i receive:

/app # curl <http://hydra-admin.ory.svc.cluster.local:4445/clients>
{"error":"error","error_description":"The error is unrecognizable"}

But when I use the same command with --headers with the https, it works perfectly…it should be done in the virtualservice for all the requests….right?

Hey Ramon, I do not have much experience with Istio personally, but will ask around. Also here is a bit older discussion (more on Oathkeeper, but also involving Hydra) that might be of some help: https://github.com/ory/oathkeeper/issues/624

is this a problem related with my version of istio? we are in 1.8.1

I dont think that is the issue, but maybe I am missing something - what lead you to that assumption?

just thinking about what can happen, i’m creating the custom headers as the documentation says….