jacob-delgado

#!/bin/sh
​
#Tested with istio master SHA: 9875a1e76d32a000ff56a6741eed2730224c4431
kubectl create namespace istio-system
​
helm install istio-base --namespace istio-system istio/manifests/base
​
helm install istio-control --namespace istio-system \
  istio/manifests/istio-control/istio-discovery \
  -f istio/manifests/global.yaml \

jacob-delgado

package main

import (
	"fmt"
	"net"
	"net/http"
)

func headers(w http.ResponseWriter, req *http.Request) {
	for name, headers := range req.Header {

jacob-delgado

// Copyright Istio Authors
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,

jacob-delgado

sudo ip6tables -t nat -A POSTROUTING -s $(docker inspect network kind 2>/dev/null | jq -r '.[0].IPAM.Config[1].Subnet') ! -o docker0 -j MASQUERADE

jacob-delgado

## Create 4-node environment config
#$ cat << EOF > config-4node.yml
#kind: Cluster
#apiVersion: kind.x-k8s.io/v1alpha4
#nodes:
#  - role: control-plane
#  - role: worker
#  - role: worker
#  - role: worker
# EOF

jacob-delgado

Istio + Multus CNI: Annotation clobbering, replication and fix

This details a reference deployment of Istio w/ Multus CNI to demonstrate a problem where annotations are being clobbered by the Istio webhook. It also provides a patch and workflow for a possible fix.

This article first demonstrates how to reproduce the article, then proposes a patch, and demonstrates a way to build and deploy Istio with the modified code.

NOTE: Ignore the 1.5.1 through the install, I replicate it with latest (Nov 2021), and provide further steps following the rest of the installation.

Suggested system

jacob-delgado

admin:
  access_log_path: /tmp/admin_access.log
  address:
    socket_address:
      protocol: TCP
      address: 127.0.0.1
      port_value: 9901
static_resources:
  listeners:
  - name: dual_stack_listener