diff --git a/packages/rancher-istio/1.14/rancher-istio/charts/Chart.yaml b/packages/rancher-istio/1.14/rancher-istio/charts/Chart.yaml index e2a24d7a1..9e6c1f65b 100644 --- a/packages/rancher-istio/1.14/rancher-istio/charts/Chart.yaml +++ b/packages/rancher-istio/1.14/rancher-istio/charts/Chart.yaml @@ -1,19 +1,19 @@ annotations: catalog.cattle.io/certified: rancher catalog.cattle.io/display-name: Istio - catalog.cattle.io/kube-version: '>= 1.20.0-0 < 1.24.0-0' + catalog.cattle.io/kube-version: '>= 1.21.0-0 < 1.25.0-0' catalog.cattle.io/namespace: istio-system catalog.cattle.io/os: linux catalog.cattle.io/permits-os: linux,windows - catalog.cattle.io/rancher-version: '>= 2.6.0-0 <= 2.6.100-0' + catalog.cattle.io/rancher-version: '>= 2.6.0-0 < 2.7.0-0' catalog.cattle.io/release-name: rancher-istio catalog.cattle.io/requests-cpu: 710m catalog.cattle.io/requests-memory: 2314Mi catalog.cattle.io/type: cluster-tool catalog.cattle.io/ui-component: istio - catalog.cattle.io/upstream-version: 1.13.3 + catalog.cattle.io/upstream-version: 1.14.1 apiVersion: v1 -appVersion: 1.13.3 +appVersion: 1.14.1 description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/ for details. icon: https://charts.rancher.io/assets/logos/istio.svg @@ -21,4 +21,4 @@ keywords: - networking - infrastructure name: rancher-istio -version: 1.13.3 +version: 1.14.1 diff --git a/packages/rancher-istio/1.14/rancher-istio/charts/app-readme.md b/packages/rancher-istio/1.14/rancher-istio/charts/app-readme.md index d5ebeedec..d2d4dfd49 100644 --- a/packages/rancher-istio/1.14/rancher-istio/charts/app-readme.md +++ b/packages/rancher-istio/1.14/rancher-istio/charts/app-readme.md @@ -18,6 +18,9 @@ To install istio with CNI enabled, e.g. when cluster has a default PSP set to "r `mkdir -p /var/run/istio-cni && semanage fcontext -a -t container_file_t /var/run/istio-cni && restorecon -v /var/run/istio-cni` See [this issue](https://github.com/rancher/rancher/issues/33291) for details. +## Installing istio with distroless-images. +Istio `100.4.0+up1.14.1` uses distroless images for `istio-proxyv2`, `istio-install-cni` and `istio-pilot`. Distroless images don't have the common debugging tools like `bash`, `curl`, etc. If you wish to troubleshoot Istio, you can switch to regular images by updating `values.yaml` file. + ## Deprecations #### v1alpha1 security policies diff --git a/packages/rancher-istio/1.14/rancher-istio/charts/values.yaml b/packages/rancher-istio/1.14/rancher-istio/charts/values.yaml index 394106820..e395d5a73 100644 --- a/packages/rancher-istio/1.14/rancher-istio/charts/values.yaml +++ b/packages/rancher-istio/1.14/rancher-istio/charts/values.yaml @@ -1,11 +1,11 @@ overlayFile: "" -tag: 1.13.3 +tag: 1.14.1 ##Setting forceInstall: true will remove the check for istio version < 1.6.x and will not analyze your install cluster prior to install forceInstall: false installer: repository: rancher/istio-installer - tag: 1.13.3-rancher1 + tag: 1.14.1-rancher1 ##releaseMirror are configurations for istio upgrades. ##Setting releaseMirror.enabled: true will cause istio to use bundled in images from rancher/istio-installer to perfom an upgrade - this is ideal ##for airgap setups. Setting releaseMirror.enabled to false means istio will call externally to github to fetch the required assets. @@ -26,7 +26,10 @@ base: cni: enabled: false repository: rancher/mirrored-istio-install-cni - tag: 1.13.3 +# If you wish to troubleshoot Istio, you can switch to regular images by uncommenting the following tag and deleting +# the distroless tag: +# tag: 1.14.1 + tag: 1.14.1-distroless logLevel: info excludeNamespaces: - istio-system @@ -46,7 +49,10 @@ istiodRemote: pilot: enabled: true repository: rancher/mirrored-istio-pilot - tag: 1.13.3 +# If you wish to troubleshoot Istio, you can switch to regular images by uncommenting the following tag and deleting +# the distroless tag: +# tag: 1.14.1 + tag: 1.14.1-distroless telemetry: enabled: true @@ -58,10 +64,16 @@ global: systemDefaultRegistry: "" proxy: repository: rancher/mirrored-istio-proxyv2 - tag: 1.13.3 +# If you wish to troubleshoot Istio, you can switch to regular images by uncommenting the following tag and deleting +# the distroless tag: +# tag: 1.14.1 + tag: 1.14.1-distroless proxy_init: repository: rancher/mirrored-istio-proxyv2 - tag: 1.13.3 +# If you wish to troubleshoot Istio, you can switch to regular images by uncommenting the following tag and deleting +# the distroless tag: +# tag: 1.14.1 + tag: 1.14.1-distroless defaultPodDisruptionBudget: enabled: true rbac: diff --git a/packages/rancher-istio/1.14/rancher-istio/generated-changes/dependencies/kiali/dependency.yaml b/packages/rancher-istio/1.14/rancher-istio/generated-changes/dependencies/kiali/dependency.yaml index ebcbdc88b..89efd8414 100644 --- a/packages/rancher-istio/1.14/rancher-istio/generated-changes/dependencies/kiali/dependency.yaml +++ b/packages/rancher-istio/1.14/rancher-istio/generated-changes/dependencies/kiali/dependency.yaml @@ -1,2 +1,2 @@ workingDir: "" -url: packages/rancher-istio/1.13/rancher-kiali-server +url: packages/rancher-istio/1.14/rancher-kiali-server diff --git a/packages/rancher-istio/1.14/rancher-istio/generated-changes/dependencies/tracing/dependency.yaml b/packages/rancher-istio/1.14/rancher-istio/generated-changes/dependencies/tracing/dependency.yaml index 7648c98a1..0aa6632b7 100644 --- a/packages/rancher-istio/1.14/rancher-istio/generated-changes/dependencies/tracing/dependency.yaml +++ b/packages/rancher-istio/1.14/rancher-istio/generated-changes/dependencies/tracing/dependency.yaml @@ -1,2 +1,2 @@ workingDir: "" -url: packages/rancher-istio/1.13/rancher-tracing +url: packages/rancher-istio/1.14/rancher-tracing diff --git a/packages/rancher-istio/1.14/rancher-istio/package.yaml b/packages/rancher-istio/1.14/rancher-istio/package.yaml index 904e94a1f..48119c412 100644 --- a/packages/rancher-istio/1.14/rancher-istio/package.yaml +++ b/packages/rancher-istio/1.14/rancher-istio/package.yaml @@ -1,2 +1,2 @@ url: local -version: 100.3.0+up1.13.3 +version: 100.4.0+up1.14.1 diff --git a/release.yaml b/release.yaml index e68a79cce..23d13dbe8 100644 --- a/release.yaml +++ b/release.yaml @@ -40,4 +40,5 @@ fleet-agent: - 100.0.4+up0.3.10-rc1 fleet-crd: - 100.0.4+up0.3.10-rc1 - +rancher-istio: +- 100.4.0+up1.14.1