rancher-docs/assets/js/bbf73ff3.dacd75bb.js

"use strict";(self.webpackChunkrancher_docs=self.webpackChunkrancher_docs||[]).push([[16344],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>m});var i=n(67294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);t&&(i=i.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,i)}return n}function a(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,i,r=function(e,t){if(null==e)return{};var n,i,r={},o=Object.keys(e);for(i=0;i<o.length;i++)n=o[i],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(i=0;i<o.length;i++)n=o[i],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=i.createContext({}),u=function(e){var t=i.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},p=function(e){var t=u(e.components);return i.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return i.createElement(i.Fragment,{},t)}},d=i.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,s=e.parentName,p=l(e,["components","mdxType","originalType","parentName"]),d=u(n),m=r,g=d["".concat(s,".").concat(m)]||d[m]||c[m]||o;return n?i.createElement(g,a(a({ref:t},p),{},{components:n})):i.createElement(g,a({ref:t},p))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,a=new Array(o);a[0]=d;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:r,a[1]=l;for(var u=2;u<o;u++)a[u]=n[u];return i.createElement.apply(null,a)}return i.createElement.apply(null,n)}d.displayName="MDXCreateElement"},14549:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>a,default:()=>g,frontMatter:()=>o,metadata:()=>l,toc:()=>u});var i=n(87462),r=(n(67294),n(3905));const o={title:"1. Enable Istio in the Cluster"},a=void 0,l={unversionedId:"how-to-guides/advanced-user-guides/istio-setup-guide/enable-istio-in-cluster",id:"version-2.6/how-to-guides/advanced-user-guides/istio-setup-guide/enable-istio-in-cluster",title:"1. Enable Istio in the Cluster",description:"- Only a user with the cluster-admin Kubernetes default role assigned can configure and install Istio in a Kubernetes cluster.",source:"@site/versioned_docs/version-2.6/how-to-guides/advanced-user-guides/istio-setup-guide/enable-istio-in-cluster.md",sourceDirName:"how-to-guides/advanced-user-guides/istio-setup-guide",slug:"/how-to-guides/advanced-user-guides/istio-setup-guide/enable-istio-in-cluster",permalink:"/v2.6/how-to-guides/advanced-user-guides/istio-setup-guide/enable-istio-in-cluster",draft:!1,editUrl:"https://github.com/rancher/rancher-docs/edit/main/versioned_docs/version-2.6/how-to-guides/advanced-user-guides/istio-setup-guide/enable-istio-in-cluster.md",tags:[],version:"2.6",lastUpdatedAt:1670549188,formattedLastUpdatedAt:"Dec 9, 2022",frontMatter:{title:"1. Enable Istio in the Cluster"},sidebar:"tutorialSidebar",previous:{title:"Setup Guide",permalink:"/v2.6/pages-for-subheaders/istio-setup-guide"},next:{title:"2. Enable Istio in a Namespace",permalink:"/v2.6/how-to-guides/advanced-user-guides/istio-setup-guide/enable-istio-in-namespace"}},s={},u=[{value:"Additional Config Options",id:"additional-config-options",level:2}],p=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},c=p("Tabs"),d=p("TabItem"),m={toc:u};function g(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,i.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("admonition",{title:"Prerequisites:",type:"note"},(0,r.kt)("ul",{parentName:"admonition"},(0,r.kt)("li",{parentName:"ul"},"Only a user with the ",(0,r.kt)("inlineCode",{parentName:"li"},"cluster-admin")," ",(0,r.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles"},"Kubernetes default role")," assigned can configure and install Istio in a Kubernetes cluster."),(0,r.kt)("li",{parentName:"ul"},"If you have pod security policies, you will need to install Istio with the CNI enabled. For details, see ",(0,r.kt)("a",{parentName:"li",href:"/v2.6/integrations-in-rancher/istio/configuration-options/pod-security-policies"},"this section.")),(0,r.kt)("li",{parentName:"ul"},"To install Istio on an RKE2 cluster, additional steps are required. For details, see ",(0,r.kt)("a",{parentName:"li",href:"/v2.6/integrations-in-rancher/istio/configuration-options/install-istio-on-rke2-cluster"},"this section.")),(0,r.kt)("li",{parentName:"ul"},"To install Istio in a cluster where project network isolation is enabled, additional steps are required. For details, see ",(0,r.kt)("a",{parentName:"li",href:"/v2.6/integrations-in-rancher/istio/configuration-options/project-network-isolation"},"this section.")))),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(d,{value:"Rancher v2.6.5+",mdxType:"TabItem"},(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"\u2630 > Cluster Management"),"."),(0,r.kt)("li",{parentName:"ol"},"Go to the where you want to enable Istio and click ",(0,r.kt)("strong",{parentName:"li"},"Explore"),"."),(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"Apps"),"."),(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"Charts"),"."),(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"Istio"),"."),(0,r.kt)("li",{parentName:"ol"},"If you have not already installed your own monitoring app, you will be prompted to install the rancher-monitoring app. Optional: Set your Selector or Scrape config options on rancher-monitoring app install."),(0,r.kt)("li",{parentName:"ol"},"Optional: Configure member access and ",(0,r.kt)("a",{parentName:"li",href:"/v2.6/integrations-in-rancher/istio/cpu-and-memory-allocations"},"resource limits")," for the Istio components. Ensure you have enough resources on your worker nodes to enable Istio."),(0,r.kt)("li",{parentName:"ol"},"Optional: Make additional configuration changes to values.yaml if needed."),(0,r.kt)("li",{parentName:"ol"},"Optional: Add additional resources or configuration via the ",(0,r.kt)("a",{parentName:"li",href:"/v2.6/pages-for-subheaders/configuration-options#overlay-file"},"overlay file.")),(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"Install"),"."))),(0,r.kt)(d,{value:"Rancher before v2.6.5",mdxType:"TabItem"},(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"\u2630 > Cluster Management"),"."),(0,r.kt)("li",{parentName:"ol"},"Go to the where you want to enable Istio and click ",(0,r.kt)("strong",{parentName:"li"},"Explore"),"."),(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"Apps & Marketplace"),"."),(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"Charts"),"."),(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"Istio"),"."),(0,r.kt)("li",{parentName:"ol"},"If you have not already installed your own monitoring app, you will be prompted to install the rancher-monitoring app. Optional: Set your Selector or Scrape config options on rancher-monitoring app install."),(0,r.kt)("li",{parentName:"ol"},"Optional: Configure member access and ",(0,r.kt)("a",{parentName:"li",href:"/v2.6/integrations-in-rancher/istio/cpu-and-memory-allocations"},"resource limits")," for the Istio components. Ensure you have enough resources on your worker nodes to enable Istio."),(0,r.kt)("li",{parentName:"ol"},"Optional: Make additional configuration changes to values.yaml if needed."),(0,r.kt)("li",{parentName:"ol"},"Optional: Add additional resources or configuration via the ",(0,r.kt)("a",{parentName:"li",href:"/v2.6/pages-for-subheaders/configuration-options#overlay-file"},"overlay file.")),(0,r.kt)("li",{parentName:"ol"},"Click ",(0,r.kt)("strong",{parentName:"li"},"Install"),".")))),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"Result:")," Istio is installed at the cluster level."),(0,r.kt)("h2",{id:"additional-config-options"},"Additional Config Options"),(0,r.kt)("p",null,"For more information on configuring Istio, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/v2.6/pages-for-subheaders/configuration-options"},"configuration reference.")))}g.isMDXComponent=!0}}]);