Istio OCI Images (linux/arm64, linux/amd64)
This repo is for building oci images for istio stacks (until official supports).
How to use?
using images under ghcr.io/resf/istio
Environment Requirements
make sure aarch64 (32bit is not supported. because of the envoy, with needs google wee8)
Install Istio Operator
Same as https://istio.io/latest/docs/setup/install/operator, but with --hub
$ istioctl operator init --hub=ghcr.io/resf/istio
Install Istio
Same as https://istio.io/latest/docs/setup/install
$ kubectl create ns istio-system
$ kubectl apply -f - <<EOF
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
namespace: istio-system
name: example-istiocontrolplane
spec:
hub: ghcr.io/resf/istio
profile: demo
EOF
notice the spec.hub, if deploy failed on arm64 hosts. should set spec.components.*.k8s.affinity, like
since
1.10.x, values.global.arch deprecated
, we may not need this any more.
spec:
components:
pilot:
k8s: # each components have to set this
affinity: &affinity
nodeAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
nodeSelectorTerms:
- matchExpressions:
- key: kubernetes.io/arch
operator: In
values:
- arm64
- amd64
egressGateways:
- name: "istio-egressgateway"
k8s:
affinity: *affinity
ingressGateways:
- name: "istio-ingressgateway"
k8s:
affinity: *affinityNotice
- all images tag version without
vprefix like official did - Release only the supported releases
%%{init:{'theme':'base'}}%%
flowchart TD
dependabot
ga_build_tools("github actions build-tools")
subgraph ga_isito ["github actions istio"]
build_envoy_arm64["build envoy for arm64"]
build_istio["build istio"]
build_envoy_arm64
--> build_istio
end
build_tools_images("ghcr.io/resf/istio/build-tools[-proxy]:release-<VERSION_MINOR>-latest")
istio_images("ghcr.io/resf/istio/*:<VERSION>*[-distroless]")
dependabot
-->|"upgrade if need"|gitmodules("tools commitsha in gitmodules")
-->|"merge & trigger"|ga_build_tools
-->|"build & push"|build_tools_images
dependabot
-->|"upgrade if need"|Dockerfile("patch version in Dockerfile.version")
-->|"merge & trigger"|ga_isito
-->|"build & push"|istio_images