Files
rancher-docs/assets/js/1e28d2c3.029576b3.js
T

1 line
6.1 KiB
JavaScript

"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[99296],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var i=n(67294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}function a(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,i,r=function(e,t){if(null==e)return{};var n,i,r={},o=Object.keys(e);for(i=0;i<o.length;i++)n=o[i],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(i=0;i<o.length;i++)n=o[i],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var l=i.createContext({}),p=function(e){var t=i.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},c=function(e){var t=p(e.components);return i.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return i.createElement(i.Fragment,{},t)}},d=i.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,l=e.parentName,c=s(e,["components","mdxType","originalType","parentName"]),d=p(n),m=r,f=d["".concat(l,".").concat(m)]||d[m]||u[m]||o;return n?i.createElement(f,a(a({ref:t},c),{},{components:n})):i.createElement(f,a({ref:t},c))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,a=new Array(o);a[0]=d;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,a[1]=s;for(var p=2;p<o;p++)a[p]=n[p];return i.createElement.apply(null,a)}return i.createElement.apply(null,n)}d.displayName="MDXCreateElement"},17809:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>a,default:()=>u,frontMatter:()=>o,metadata:()=>s,toc:()=>p});var i=n(87462),r=(n(67294),n(3905));const o={title:"Additional Steps for Installing Istio on an RKE2 Cluster"},a=void 0,s={unversionedId:"explanations/integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster",id:"version-2.5/explanations/integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster",title:"Additional Steps for Installing Istio on an RKE2 Cluster",description:"Through the Cluster Explorer, when installing or upgrading Istio through Apps & Marketplace,",source:"@site/versioned_docs/version-2.5/explanations/integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster.md",sourceDirName:"explanations/integrations-in-rancher/istio/configuration-options",slug:"/explanations/integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster",permalink:"/v2.5/explanations/integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.5/explanations/integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster.md",tags:[],version:"2.5",lastUpdatedAt:1663953084,formattedLastUpdatedAt:"Sep 23, 2022",frontMatter:{title:"Additional Steps for Installing Istio on an RKE2 Cluster"},sidebar:"tutorialSidebar",previous:{title:"Selectors and Scrape Configs",permalink:"/v2.5/explanations/integrations-in-rancher/istio/configuration-options/selectors-and-scrape-configurations"},next:{title:"Additional Steps for Project Network Isolation",permalink:"/v2.5/explanations/integrations-in-rancher/istio/configuration-options/project-network-isolation"}},l={},p=[],c={toc:p};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,i.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"Through the ",(0,r.kt)("strong",{parentName:"p"},"Cluster Explorer,")," when installing or upgrading Istio through ",(0,r.kt)("strong",{parentName:"p"},"Apps & Marketplace,")),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Click ",(0,r.kt)("strong",{parentName:"p"},"Components."))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Check the box next to ",(0,r.kt)("strong",{parentName:"p"},"Enabled CNI."))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Add a custom overlay file specifying ",(0,r.kt)("inlineCode",{parentName:"p"},"cniBinDir")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"cniConfDir"),". For more information on these options, refer to the ",(0,r.kt)("a",{parentName:"p",href:"https://istio.io/latest/docs/setup/additional-setup/cni/#helm-chart-parameters"},"Istio documentation.")," An example is below:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: install.istio.io/v1alpha1\nkind: IstioOperator\nspec:\n components:\n cni:\n enabled: true\n values:\n cni:\n image: rancher/istio-install-cni:1.7.3\n excludeNamespaces:\n - istio-system\n - kube-system\n logLevel: info\n cniBinDir: /opt/cni/bin\n cniConfDir: /etc/cni/net.d\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"After installing Istio, you'll notice the cni-node pods in the istio-system namespace in a CrashLoopBackoff error. Manually edit the ",(0,r.kt)("inlineCode",{parentName:"p"},"istio-cni-node")," daemonset to include the following on the ",(0,r.kt)("inlineCode",{parentName:"p"},"install-cni")," container:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"securityContext:\n privileged: true\n")))),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"Result:")," Now you should be able to utilize Istio as desired, including sidecar injection and monitoring via Kiali."))}u.isMDXComponent=!0}}]);