Enable Istio in the Cluster

Rancher-Istio will be deprecated in Rancher v2.12.0; turn to the SUSE Application Collection build of Istio for enhanced security (included in SUSE Rancher Prime subscriptions). Detailed information can be found in this announcement
Prerequisites:

  • Only a user with the cluster-admin Kubernetes default role assigned can configure and install Istio in a Kubernetes cluster.

  • If you have pod security policies, you will need to install Istio with the CNI enabled. For details, see this section.

  • To install Istio on an RKE2 cluster, additional steps are required. For details, see this section.

  • To install Istio in a cluster where project network isolation is enabled, additional steps are required. For details, see this section.

  1. Click ☰ > Cluster Management.

  2. Go to the where you want to enable Istio and click Explore.

  3. Click Apps.

  4. Click Charts.

  5. Click Istio.

  6. If you have not already installed your own monitoring app, you will be prompted to install the rancher-monitoring app. Optional: Set your Selector or Scrape config options on rancher-monitoring app install.

  7. Optional: Configure member access and resource limits for the Istio components. Ensure you have enough resources on your worker nodes to enable Istio.

  8. Optional: Make additional configuration changes to values.yaml if needed.

  9. Optional: Add further resources or configuration via the overlay file.

  10. Click Install.

Result: Istio is installed at the cluster level.

Additional Config Options

For more information on configuring Istio, refer to the configuration reference.

OSZAR »