product · inferred from evidence
mTLS
Mutual TLS, referenced as a feature of Istio that CockroachDB is incompatible with.
- CockroachDB on Kubernetes with Istio: "connection refused" — how to run insecure statefulset with istio mTLS
Rename the 26257 port from grpc to tcp in the CockroachDB Service and StatefulSet manifests so the Istio sidecar treats the traffic as plain TCP instead of trying gRPC protocol sniffing. That is the fix multiple users confirmed (one via mik