public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-24 20:18:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

Adding section on upgrading Istio in an air-gapped env

Browse Source
This commit is contained in:
Jennifer Travinski
2022-11-03 10:46:08 -04:00
parent aa0c456ba1
commit c97c1cf822
1 changed files with 25 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/pages-for-subheaders/istio.md
+25 -2
View File
@@ -55,8 +55,6 @@ Before enabling Istio, we recommend that you confirm that your Rancher worker no
If you are installing Istio on RKE2 cluster, some additional steps are required. For details, see [this section.](#additional-steps-for-installing-istio-on-an-rke2-cluster)
Note that Istio v2 (upstream Istio v1.7+) cannot be upgraded in an air gapped environment.
## Setup Guide
Refer to the [setup guide](istio-setup-guide.md) for instructions on how to set up Istio and use it in a project.
@@ -122,3 +120,28 @@ By default the Egress gateway is disabled, but can be enabled on install or upgr
## Additional Steps for Installing Istio on an RKE2 Cluster
To install Istio on an RKE2 cluster, follow the steps in [this section.](../integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster.md)
## Upgrading Istio in an Air-Gapped Environment
In Rancher v2.6.x and up, Istio may be upgraded in an air-gapped environment.
The Istio pod security policy is now enabled by default, and a new value, `installer.releaseMirror.enabled`, has been added to the rancher-istio chart to enable and disable the server that supports air-gapped upgrades. Note that `installer.releaseMirror.enabled` is set to `false` by default and must be changed as needed during install or upgrade. Follow the steps below:
1. Provision an air-gapped Rancher 2.6.x instance and an air-gapped custom cluster in the Rancher UI.
2. Install Monitoring in the cluster: **Cluster Explorer -> Apps & Marketplace -> Charts -> Monitoring**.
3. Pull all required images for Istio in the private registry setup that will be used in the air-gapped environment.
4. Install Istio in the cluster: **Cluster Explorer -> Apps & Marketplace -> Charts -> Istio**.
:::note
On the fresh Istio install, [Jaeger](https://www.jaegertracing.io/[) and [Kiali](https://kiali.io/) may be enabled if desired. To ensure Jaeger and Kiali work, ensure that `installer.releaseMirror.enabled=true` is set in the values.yaml at install.
:::
5. Upgrade the Istio installation.
:::caution
If not done by this point, you must set the value `installer.releaseMirror.enabled=true` to allow for the upgrade.
:::