Skip to content
This repository has been archived by the owner on Oct 7, 2020. It is now read-only.

Minimal install

Jump to bottom
Costin Manolache edited this page Sep 5, 2019 · 2 revisions

  1. Install Istio cluster-wide resources: kubectl apply -k github.com/istio/installer/kustomize/cluster

  2. Install minimal Istio, consisting of Pilot: kubectl apply -k github.com/istio/installer/kustomize/minimal

  3. Install Istio Ingress Gateway: kubectl apply -k github.com/istio/installer/kustomize/istio-ingress

The profile will run only Pilot and Ingress gateway, in istio-system namespace.

It is recommended to only run this profile in production if the network CNI plugin has built-in encryption ( IPSec, Wireguard, or other secure VPC solutions), since Istio mtls and certificate management are not configured by default.

The installed ingress can work with non-Istio workloads. The minimal install doesn't include cluster auto-injection - to inject a sidecar, use:

istioctl kube-inject -f .../servicesToBeInjected.yaml \
		--meshConfigFile mesh.yaml \
		--valuesFile values.yaml \
		--injectConfigFile istio-control/istio-autoinject/files/injection-template.yaml \
	 | kubectl apply -f -
Clone this wiki locally