opa istio example problem

[msubbotin]

Hello. I've tried to make example
Everything alright except last steps, when I call

curl --user alice:password -i http://$SERVICE_HOST/productpage
curl --user alice:password -i http://$SERVICE_HOST/api/v1/products

I always got curl: (52) Empty reply from server

OPA logs contains only /health requests:

{"client_addr":"10.51.0.26:48542","level":"info","msg":"Received request.","req_id":2810,"req_method":"GET","req_path":"/health","time":"2024-03-27T15:36:25Z"}
{"client_addr":"10.51.0.26:48542","level":"info","msg":"Sent response.","req_id":2810,"req_method":"GET","req_path":"/health","resp_bytes":3,"resp_duration":0.347018,"resp_status":200,"time":"2024-03-27T15:36:25Z"}
{"client_addr":"10.51.0.26:48558","level":"info","msg":"Received request.","req_id":2811,"req_method":"GET","req_path":"/health","time":"2024-03-27T15:36:30Z"}
{"client_addr":"10.51.0.26:48558","level":"info","msg":"Sent response.","req_id":2811,"req_method":"GET","req_path":"/health","resp_bytes":3,"resp_duration":0.305795,"resp_status":200,"time":"2024-03-27T15:36:30Z"}
{"client_addr":"10.51.0.26:48554","level":"info","msg":"Received request.","req_id":2812,"req_method":"GET","req_path":"/health","time":"2024-03-27T15:36:30Z"}
{"client_addr":"10.51.0.26:48554","level":"info","msg":"Sent response.","req_id":2812,"req_method":"GET","req_path":"/health","resp_bytes":3,"resp_duration":0.169368,"resp_status":200,"time":"2024-03-27T15:36:30Z"}

I don't know how to fix it. Could you give me some advice? Thanks

[ashutosh-narkar]

From the OPA logs it looks like it is not getting the messages from Istio. I would check the logs of the Envoy proxy container and other Istio-related containers.

[msubbotin]

After run command
kubectl logs -n istio-system -l app=istiod --tail=1000 -c discovery
I got:

2024-03-29T10:27:54.837746Z	info	ads	LDS: PUSH for node:gateway-844756db8f-9rndm.istio-system resources:0 size:0B
2024-03-29T10:28:01.247723Z	info	ads	Push Status: {
    "pilot_eds_no_instances": {
        "outbound|9080||details.default.svc.cluster.local": {},
        "outbound|9080||productpage.default.svc.cluster.local": {},
        "outbound|9080||ratings.default.svc.cluster.local": {},
        "outbound|9080||reviews.default.svc.cluster.local": {}
    }
}
2024-03-29T10:35:16.856342Z	info	ads	ADS: "10.101.26.128:46684" ratings-v1-7c9cd8db6d-7pt62.default-623 terminated
2024-03-29T10:35:17.302598Z	info	ads	ADS: new connection for node:ratings-v1-7c9cd8db6d-7pt62.default-630

I think the problem is that pilot_eds_no_instances values are empty