EnvoyIstio

Envoy proxy container crashes after EnvoyFilter applied

critical
availabilityUpdated Feb 24, 2026(via Exa)
How to detect:

istio-proxy container crashes immediately after applying an EnvoyFilter, caused by invalid filter configuration that Envoy cannot parse, missing required fields in filter config, or references to non-existent clusters (e.g., in Lua httpCall)

Recommended action:

Retrieve logs from the crashed container using --previous flag. Look for parse errors, missing required configuration fields, or invalid cluster references. Validate EnvoyFilter YAML syntax and Envoy-specific configuration. Remove or correct the problematic EnvoyFilter.