it has following ports

15021:32447/TCP,80:31085/TCP,443:31080/TCP   5h50m

Thank you sir.

Yaml pls

Do I compulsarly need to have tls cert for this?

yaml of service right or of pod?

Svc yaml

i used helm for installation, but here is the output of describe

Name:                     istio-ingressgateway
Namespace:                istio-system
Labels:                   app=istio-ingressgateway
                          app.kubernetes.io/managed-by=Helm
                          install.operator.istio.io/owning-resource=unknown
                          istio=ingressgateway
                          istio.io/rev=default
                          operator.istio.io/component=IngressGateways
                          release=istio-ingress
Annotations:              meta.helm.sh/release-name: istio-ingress
                          meta.helm.sh/release-namespace: istio-system
Selector:                 app=istio-ingressgateway,istio=ingressgateway
Type:                     LoadBalancer
IP:                       10.100.23.177
LoadBalancer Ingress:     random-aws-alb.us-east-2.elb.amazonaws.com
Port:                     status-port  15021/TCP
TargetPort:               15021/TCP
NodePort:                 status-port  32447/TCP
Endpoints:                172.40.3.213:15021
Port:                     http2  80/TCP
TargetPort:               8080/TCP
NodePort:                 http2  31085/TCP
Endpoints:                172.40.3.213:8080
Port:                     https  443/TCP
TargetPort:               8443/TCP
NodePort:                 https  31080/TCP
Endpoints:                172.40.3.213:8443
Session Affinity:         None
External Traffic Policy:  Cluster
Events:                   <none>

this is valid

do I have to open up a new port for GRPC in istio ingress service to make it work?

hey @DimiDr0l anything ?

hy there any suggestions please.

https://pastebin.com/jJN3wHUb

just share my working config for grpc
hope it helps

thank you very much @lastdil let me try it and get back to you

do you have mTLS enabled on your istio installation?

No

could yuo share me the steps you carried out @lastdil if possible?
I have been struggling since last two days for making it work.

And also, I am trying to achieve this on internally (with no services exposed publically)

actually issue only with external access outside the cluster?

no, issue is internally as well.
no service can reach eachother

okay, you can try to apply my config (only change ports to yours ) and share the result. there is no need to do anything else

ok applying it right now