From c97c1cf822ee409045934ba72c7aebfcd066eaca Mon Sep 17 00:00:00 2001 From: Jennifer Travinski Date: Thu, 3 Nov 2022 10:46:08 -0400 Subject: [PATCH] Adding section on upgrading Istio in an air-gapped env --- docs/pages-for-subheaders/istio.md | 27 +++++++++++++++++++++++++-- 1 file changed, 25 insertions(+), 2 deletions(-) diff --git a/docs/pages-for-subheaders/istio.md b/docs/pages-for-subheaders/istio.md index 76d7bd4a1d8..fe6048afb3a 100644 --- a/docs/pages-for-subheaders/istio.md +++ b/docs/pages-for-subheaders/istio.md @@ -55,8 +55,6 @@ Before enabling Istio, we recommend that you confirm that your Rancher worker no If you are installing Istio on RKE2 cluster, some additional steps are required. For details, see [this section.](#additional-steps-for-installing-istio-on-an-rke2-cluster) -Note that Istio v2 (upstream Istio v1.7+) cannot be upgraded in an air gapped environment. - ## Setup Guide Refer to the [setup guide](istio-setup-guide.md) for instructions on how to set up Istio and use it in a project. @@ -122,3 +120,28 @@ By default the Egress gateway is disabled, but can be enabled on install or upgr ## Additional Steps for Installing Istio on an RKE2 Cluster To install Istio on an RKE2 cluster, follow the steps in [this section.](../integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster.md) + +## Upgrading Istio in an Air-Gapped Environment + +In Rancher v2.6.x and up, Istio may be upgraded in an air-gapped environment. + +The Istio pod security policy is now enabled by default, and a new value, `installer.releaseMirror.enabled`, has been added to the rancher-istio chart to enable and disable the server that supports air-gapped upgrades. Note that `installer.releaseMirror.enabled` is set to `false` by default and must be changed as needed during install or upgrade. Follow the steps below: + +1. Provision an air-gapped Rancher 2.6.x instance and an air-gapped custom cluster in the Rancher UI. +2. Install Monitoring in the cluster: **Cluster Explorer -> Apps & Marketplace -> Charts -> Monitoring**. +3. Pull all required images for Istio in the private registry setup that will be used in the air-gapped environment. +4. Install Istio in the cluster: **Cluster Explorer -> Apps & Marketplace -> Charts -> Istio**. + +:::note + +On the fresh Istio install, [Jaeger](https://www.jaegertracing.io/[) and [Kiali](https://kiali.io/) may be enabled if desired. To ensure Jaeger and Kiali work, ensure that `installer.releaseMirror.enabled=true` is set in the values.yaml at install. + +::: + +5. Upgrade the Istio installation. + +:::caution + +If not done by this point, you must set the value `installer.releaseMirror.enabled=true` to allow for the upgrade. + +::: \ No newline at end of file