This repository has been archived by the owner on Oct 7, 2020. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 106
Minimal install
Costin Manolache edited this page Sep 5, 2019
·
2 revisions
- Install Istio cluster-wide resources:
kubectl apply -k github.com/istio/installer/kustomize/cluster
- Install minimal Istio, consisting of Pilot:
kubectl apply -k github.com/istio/installer/kustomize/minimal
- Install Istio Ingress Gateway:
kubectl apply -k github.com/istio/installer/kustomize/istio-ingress
The profile will run only Pilot and Ingress gateway, in istio-system namespace.
It is recommended to only run this profile in production if the network CNI plugin has built-in encryption ( IPSec, Wireguard, or other secure VPC solutions), since Istio mtls and certificate management are not configured by default.
The installed ingress can work with non-Istio workloads. The minimal install doesn't include cluster auto-injection - to inject a sidecar, use:
istioctl kube-inject -f .../servicesToBeInjected.yaml \
--meshConfigFile mesh.yaml \
--valuesFile values.yaml \
--injectConfigFile istio-control/istio-autoinject/files/injection-template.yaml \
| kubectl apply -f -