Last active
October 14, 2024 07:57
-
-
Save ankitcharolia/21884f66ffce0299589c4a3bce8c641e to your computer and use it in GitHub Desktop.
Install Istio Ambient Mesh using Helm Chart
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Install Ambient Mesh with Helm Charts | |
| REPO="https://istio-release.storage.googleapis.com/charts" | |
| VERSION=1.19.0 | |
| helm_opts="upgrade -i --namespace istio-system --create-namespace --repo ${REPO} --version ${VERSION}" | |
| # base | |
| helm $(echo $helm_opts) istio-base base | |
| # istiod | |
| helm $(echo $helm_opts) istiod istiod --values - <<EOF | |
| meshConfig: | |
| defaultConfig: | |
| proxyMetadata: | |
| ISTIO_META_ENABLE_HBONE: "true" | |
| # Telemetry API is used with ambient instead of EnvoyFilters | |
| defaultProviders: | |
| metrics: | |
| - prometheus | |
| extensionProviders: | |
| - name: prometheus | |
| prometheus: {} | |
| pilot: | |
| trustedZtunnelNamespace: "kube-system" # Installation in kube-system is recommended to ensure that priorityClassName can be used. | |
| env: | |
| PILOT_ENABLE_AMBIENT: 'true' | |
| PILOT_ENABLE_AMBIENT_WAYPOINTS: 'true' | |
| CA_TRUSTED_NODE_ACCOUNTS: 'istio-system/ztunnel,kube-system/ztunnel' | |
| EOF | |
| # istio-cni | |
| helm $(echo $helm_opts) istio-cni cni --values - <<EOF | |
| cni: | |
| logLevel: info | |
| # privileged: true | |
| ambient: | |
| enabled: true | |
| EOF | |
| # ztunnel | |
| helm $(echo $helm_opts) ztunnel ztunnel |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment