From c97c1cf822ee409045934ba72c7aebfcd066eaca Mon Sep 17 00:00:00 2001 From: Jennifer Travinski Date: Thu, 3 Nov 2022 10:46:08 -0400 Subject: [PATCH 1/5] Adding section on upgrading Istio in an air-gapped env --- docs/pages-for-subheaders/istio.md | 27 +++++++++++++++++++++++++-- 1 file changed, 25 insertions(+), 2 deletions(-) diff --git a/docs/pages-for-subheaders/istio.md b/docs/pages-for-subheaders/istio.md index 76d7bd4a1d8..fe6048afb3a 100644 --- a/docs/pages-for-subheaders/istio.md +++ b/docs/pages-for-subheaders/istio.md @@ -55,8 +55,6 @@ Before enabling Istio, we recommend that you confirm that your Rancher worker no If you are installing Istio on RKE2 cluster, some additional steps are required. For details, see [this section.](#additional-steps-for-installing-istio-on-an-rke2-cluster) -Note that Istio v2 (upstream Istio v1.7+) cannot be upgraded in an air gapped environment. - ## Setup Guide Refer to the [setup guide](istio-setup-guide.md) for instructions on how to set up Istio and use it in a project. @@ -122,3 +120,28 @@ By default the Egress gateway is disabled, but can be enabled on install or upgr ## Additional Steps for Installing Istio on an RKE2 Cluster To install Istio on an RKE2 cluster, follow the steps in [this section.](../integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster.md) + +## Upgrading Istio in an Air-Gapped Environment + +In Rancher v2.6.x and up, Istio may be upgraded in an air-gapped environment. + +The Istio pod security policy is now enabled by default, and a new value, `installer.releaseMirror.enabled`, has been added to the rancher-istio chart to enable and disable the server that supports air-gapped upgrades. Note that `installer.releaseMirror.enabled` is set to `false` by default and must be changed as needed during install or upgrade. Follow the steps below: + +1. Provision an air-gapped Rancher 2.6.x instance and an air-gapped custom cluster in the Rancher UI. +2. Install Monitoring in the cluster: **Cluster Explorer -> Apps & Marketplace -> Charts -> Monitoring**. +3. Pull all required images for Istio in the private registry setup that will be used in the air-gapped environment. +4. Install Istio in the cluster: **Cluster Explorer -> Apps & Marketplace -> Charts -> Istio**. + +:::note + +On the fresh Istio install, [Jaeger](https://www.jaegertracing.io/[) and [Kiali](https://kiali.io/) may be enabled if desired. To ensure Jaeger and Kiali work, ensure that `installer.releaseMirror.enabled=true` is set in the values.yaml at install. + +::: + +5. Upgrade the Istio installation. + +:::caution + +If not done by this point, you must set the value `installer.releaseMirror.enabled=true` to allow for the upgrade. + +::: \ No newline at end of file From 094a39719bc5902481a3d9c3d86656dc7cc517b1 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Thu, 26 Jan 2023 10:29:58 -0500 Subject: [PATCH 2/5] Update docs/pages-for-subheaders/istio.md --- docs/pages-for-subheaders/istio.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/pages-for-subheaders/istio.md b/docs/pages-for-subheaders/istio.md index fe6048afb3a..e72a2370e61 100644 --- a/docs/pages-for-subheaders/istio.md +++ b/docs/pages-for-subheaders/istio.md @@ -142,6 +142,6 @@ On the fresh Istio install, [Jaeger](https://www.jaegertracing.io/[) and [Kiali] :::caution -If not done by this point, you must set the value `installer.releaseMirror.enabled=true` to allow for the upgrade. +If you haven't already, set `installer.releaseMirror.enabled=true` to upgrade Istio. ::: \ No newline at end of file From f99ef6b672cef480dd6e1f7d074cb2ebb005cfe6 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Thu, 26 Jan 2023 10:30:54 -0500 Subject: [PATCH 3/5] Update docs/pages-for-subheaders/istio.md --- docs/pages-for-subheaders/istio.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/pages-for-subheaders/istio.md b/docs/pages-for-subheaders/istio.md index e72a2370e61..36a15accc11 100644 --- a/docs/pages-for-subheaders/istio.md +++ b/docs/pages-for-subheaders/istio.md @@ -125,7 +125,7 @@ To install Istio on an RKE2 cluster, follow the steps in [this section.](../inte In Rancher v2.6.x and up, Istio may be upgraded in an air-gapped environment. -The Istio pod security policy is now enabled by default, and a new value, `installer.releaseMirror.enabled`, has been added to the rancher-istio chart to enable and disable the server that supports air-gapped upgrades. Note that `installer.releaseMirror.enabled` is set to `false` by default and must be changed as needed during install or upgrade. Follow the steps below: +The Istio pod security policy is now enabled by default. A new value, `installer.releaseMirror.enabled`, has been added to the rancher-istio chart to enable and disable the server that supports air-gapped upgrades. Note that `installer.releaseMirror.enabled` is set to `false` by default. You can set this value as needed when you install or upgrade. Follow the steps below: 1. Provision an air-gapped Rancher 2.6.x instance and an air-gapped custom cluster in the Rancher UI. 2. Install Monitoring in the cluster: **Cluster Explorer -> Apps & Marketplace -> Charts -> Monitoring**. From 7341cc15f7e5c72c916cbc65451568f4ebf9802f Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Thu, 26 Jan 2023 10:31:06 -0500 Subject: [PATCH 4/5] Update docs/pages-for-subheaders/istio.md --- docs/pages-for-subheaders/istio.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/pages-for-subheaders/istio.md b/docs/pages-for-subheaders/istio.md index 36a15accc11..04378742032 100644 --- a/docs/pages-for-subheaders/istio.md +++ b/docs/pages-for-subheaders/istio.md @@ -129,7 +129,7 @@ The Istio pod security policy is now enabled by default. A new value, `installer 1. Provision an air-gapped Rancher 2.6.x instance and an air-gapped custom cluster in the Rancher UI. 2. Install Monitoring in the cluster: **Cluster Explorer -> Apps & Marketplace -> Charts -> Monitoring**. -3. Pull all required images for Istio in the private registry setup that will be used in the air-gapped environment. +3. Pull all required images for Istio into the private registry you will use in the air-gapped environment. 4. Install Istio in the cluster: **Cluster Explorer -> Apps & Marketplace -> Charts -> Istio**. :::note From 85df31b0ca8bdbe1768c0c17cbb5fdc5c513a8b3 Mon Sep 17 00:00:00 2001 From: Marty Hernandez Avedon Date: Thu, 26 Jan 2023 10:31:28 -0500 Subject: [PATCH 5/5] Update docs/pages-for-subheaders/istio.md --- docs/pages-for-subheaders/istio.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/pages-for-subheaders/istio.md b/docs/pages-for-subheaders/istio.md index 04378742032..1b39b71cd98 100644 --- a/docs/pages-for-subheaders/istio.md +++ b/docs/pages-for-subheaders/istio.md @@ -134,7 +134,7 @@ The Istio pod security policy is now enabled by default. A new value, `installer :::note -On the fresh Istio install, [Jaeger](https://www.jaegertracing.io/[) and [Kiali](https://kiali.io/) may be enabled if desired. To ensure Jaeger and Kiali work, ensure that `installer.releaseMirror.enabled=true` is set in the values.yaml at install. +You can enable [Jaeger](https://www.jaegertracing.io/[) and [Kiali](https://kiali.io/) on a fresh Istio install. To ensure that Jaeger and Kiali work, set `installer.releaseMirror.enabled` to `true` in `values.yaml` during installation. :::