Kubernetes TLSOption密码套件在Istio入口网关上不工作

Kubernetes TLSOption密码套件在Istio入口网关上不工作,kubernetes,istio,Kubernetes,Istio,我已在Istio入口网关对象上部署了密码套件: apiVersion: networking.istio.io/v1alpha3 kind: Gateway metadata: name: hello-istio-gateway spec: selector: istio: ingressgateway # use Istio default gateway implementation servers: - hosts: - "*" port:

我已在Istio入口网关对象上部署了密码套件:

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: hello-istio-gateway
spec:
  selector:
    istio: ingressgateway  # use Istio default gateway implementation
  servers:
  - hosts:
    - "*"
    port:
      name: https-wildcard
      number: 444
      protocol: HTTPS
    tls:
      mode: SIMPLE
      serverCertificate: /etc/istio/ingressgateway-certs/tls.crt
      privateKey: /etc/istio/ingressgateway-certs/tls.key
      cipherSuites: "[ECDHE-RSA-AES256-GCM-SHA384|ECDHE-RSA-AES128-GCM-SHA256]"

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: hello-istio-gateway
spec:
  selector:
    istio: ingressgateway  # use Istio default gateway implementation
  servers:
  - hosts:
    - "*"
    port:
      name: https-wildcard
      number: 444
      protocol: HTTPS
    tls:
      mode: SIMPLE
      serverCertificate: /etc/istio/ingressgateway-certs/tls.crt
      privateKey: /etc/istio/ingressgateway-certs/tls.key
      cipherSuites: [ECDHE-RSA-AES256-GCM-SHA384|ECDHE-RSA-AES128-GCM-SHA256]
但我从库贝特那里得到了错误

admission webhook "pilot.validation.istio.io" denied the request: error decoding configuration: YAML decoding error:
json: cannot unmarshal string into Go value of type []json.RawMessage
你知道我的清单有什么问题吗

提前谢谢

致以最良好的祝愿, rforberger

密码套件中删除
字符


密码套件:[ECDHE-RSA-AES256-GCM-SHA384 | ECDHE-RSA-AES128-GCM-SHA256]对我无效。将“|”更改为“,”有效。
$ kubectl apply -f gateway.yaml
gateway.networking.istio.io/hello-istio-gateway created