Chainguard Academy

https://edu.chainguard.dev
Admin
Chainguard Academy provides comprehensive documentation and guides for Chainguard's products,...
Tokens:2,112
Snippets:15
Trust Score:10
Update:11 months ago
Show doc for...
Tokens:
Raw
### Install Istio CNI using Helm

Source: https://edu.chainguard.dev/chainguard/chainguard-images/getting-started/istio

This command installs the Istio CNI plugin using Helm. It specifies the release name, chart, namespace, and points to a custom values file for configuration.

```bash
helm install istio-cni istio/cni \
  -n istio-system -f istio-cni-values.yaml
```

--------------------------------

### Install Istiod with Helm using `values.yaml`

Source: https://edu.chainguard.dev/chainguard/chainguard-images/getting-started/istio

This Helm command installs the Istio control plane (`istiod`) using a dedicated `values.yaml` file (`istiod-values.yaml`). This method is recommended for managing customizations instead of using numerous `--set` flags.

```bash
helm install istiod istio/istiod \
  -n istio-system -f istiod-values.yaml
```

--------------------------------

### Install Istio Components with Helm (Direct Commands)

Source: https://edu.chainguard.dev/chainguard/chainguard-images/getting-started/istio

This set of Helm commands demonstrates a basic installation of Istio, including the base components, the control plane (istiod), and the CNI plugin. It shows how to override default image values to use Chainguard's images for istio-proxy and istio-pilot.

```bash
helm install istio-base istio/base -n istio-system --create-namespace

helm install istiod istio/istiod -n istio-system \
  --set global.proxy.image=cgr.dev/ORGANIZATION/istio-proxy \
  --set pilot.image=cgr.dev/ORGANIZATION/istio-pilot

helm install istio-cni istio/cni -n istio-system \
  --set cni.enabled=true \
  --set cni.image=cgr.dev/ORGANIZATION/istio-install-cni \
  --set cni.cniConfDir="/var/lib/rancher/k3s/agent/etc/cni/net.d" \
  --set cni.cniBinDir="/opt/cni/bin"
```

--------------------------------

### Configure Istio CNI Helm Installation

Source: https://edu.chainguard.dev/chainguard/chainguard-images/getting-started/istio

This YAML configuration file (`istio-cni-values.yaml`) is used with Helm to customize the installation of the Istio CNI plugin. It enables the CNI, specifies the container image to use, and defines the directories for CNI configuration and binaries.

```yaml
# istio-cni-values.yaml
cni:
  enabled: true
  image: cgr.dev/ORGANIZATION/istio-install-cni
  cniConfDir: /var/lib/rancher/k3s/agent/etc/cni/net.d
  cniBinDir: /opt/cni/bin
```

--------------------------------

### Add and Update Istio Helm Repository

Source: https://edu.chainguard.dev/chainguard/chainguard-images/getting-started/istio

These commands are used to add the official Istio Helm repository to your Helm configuration and then update it to fetch the latest chart information. This is a prerequisite for installing Istio components using Helm.

```bash
helm repo add istio https://istio-release.storage.googleapis.com/charts
helm repo update
```

--------------------------------

### Download Istio-Pilot Container Image

Source: https://edu.chainguard.dev/chainguard/chainguard-images/getting-started/istio

This command allows users to pull the istio-pilot container image from the Chainguard Registry. Replace 'ORGANIZATION' with your specific organization's name in the private repository. This image contains the control plane component for Istio.

```bash
docker pull cgr.dev/ORGANIZATION/istio-pilot:latest
```

--------------------------------

### Istio Control Plane Configuration (`istiod-values.yaml`)

Source: https://edu.chainguard.dev/chainguard/chainguard-images/getting-started/istio

This YAML file defines custom values for the `istiod` Helm chart, allowing you to specify Chainguard's container images for the Istio proxy and pilot. This approach centralizes configuration for easier management.

```yaml
# istiod-values.yaml
global:
  proxy:
    image: cgr.dev/ORGANIZATION/istio-proxy     # Envoy + iptables
pilot:
  image: cgr.dev/ORGANIZATION/istio-pilot       # Control-plane
```
Tokens:
Raw