Draft: Resolve "Provide tooling to migrate an active cluster from Operator Istio to Helm Istio."
Merge request reports
Activity
added istio kindchore priority5 statusdoing teamService Mesh labels
assigned to @kipten
added disable-ci label
added statusblocked label and removed statusdoing label
mentioned in issue #2300 (closed)
added 55 commits
-
bd3cea09...b5c5af99 - 54 commits from branch
master
- 6fe82bba - Merge branch 'master' of https://repo1.dso.mil/big-bang/bigbang into...
-
bd3cea09...b5c5af99 - 54 commits from branch
added 25 commits
-
6fe82bba...b20dfd57 - 24 commits from branch
master
- b1415cac - Merge branch 'master' of https://repo1.dso.mil/big-bang/bigbang into...
-
6fe82bba...b20dfd57 - 24 commits from branch
removed statusblocked label
removed kindchore label
added kinddocs label
added statusreview label
requested review from @michaelmartin, @chris.oconnell, @andrewshoell, @chris1, and @troymobley
mentioned in merge request !5869 (merged)
requested review from @kipten
1 # Upgrading from the Istio Operator to Helm based Istio Main question I have...is this in the correct location or does it belong somewhere else in /docs ?
Edited by Greg M
1 # Upgrading from the Istio Operator to Helm based Istio 2 3 ### *The new Istio Helm packages are BETA in Big Bang 2.x and will be stable in 3.0* 4 5 ### Step 1 : Remove Istio from your current deployment 6 Before upgrading to the new Helm-based Istio packages, first disable the Istio and Istio's Operator packages: 7 ```yaml 8 istio: 9 enabled: false 10 istioOperator: 11 enabled: false suggestion: there should be no reason the customer needs to disable the
istioOperator
until after the migration is complete. We can disableistio
and enableistioCore
in one helm upgrade cycle. Theistiod
torn down by removingistio
will be replaced by theistiod
created byistioCore
, allowing workloads in the cluster to re-establish their XDS connections. Then we'd completely sidestep the need to delete the namespace.Edited by Zach Callahan
10 istioOperator: 11 enabled: false 12 ``` 13 After a few minutes, all pods in both the `istio-system` and `istio-operator` namespaces will have terminated. However, due due to Istio's finalizer, the `istio-system` namespace will be stuck in the `terminating` state. 14 15 Force the deletion of this namespace: 16 ```bash 17 kubectl get ns istio-system -o json | jq '.spec.finalizers = []' | kubectl replace --raw "/api/v1/namespaces/istio-system/finalize" -f - 18 ``` 19 Both Istio namespaces are now removed yet other remnants of Istio still linger in the cluster including custom resources. Remove them as they will be recreated via the helm deployment of Istio. The quickest way to do this is by using the [istioctl CLI tool](https://istio.io/latest/docs/ops/diagnostic-tools/istioctl/). 20 21 On macOS or Linux install it with: 22 ```bash 23 brew install istioctl 24 ``` 25 To complete the removal of remaining Istio components, purge as per [Istio's documentation](https://istio.io/latest/docs/setup/install/istioctl/#uninstall-istio): removed review request for @kipten
added statusblocked label and removed statusreview label