出口istio无法访问外部服务

Question

我目前正在尝试配置Control Egress Traffic，以便能够使用在端口8200上运行的hashicorp Vault专门访问https中的外部服务。

下面我附上我的虚拟服务和服务条目的详细信息

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: vault-se
spec:
  hosts:
  - vault.x.com
  ports:
  - number: 8200
    name: https
    protocol: HTTPS
  resolution: DNS
  location: MESH_EXTERNAL


apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: vault-vs
spec:
  hosts:
  - vault.x.com
  tls:
  - match:
    - port: 8200
      sni_hosts:
      - vault.x.com
    route:
    - destination:
        host: vault.x.com
        port:
          number: 8200
      weight: 100

知道我的错在哪里吗？