Skip to content

Instantly share code, notes, and snippets.

View karthikt-yahoo's full-sized avatar

karthikt-yahoo

View GitHub Profile
Yahoo Implementation of Istio CNI:
-----------------------------------
Yahoo didn't adopt the native method of running istio-cni-node Daemonset for the following reasons,
1. There could be a chance of race condition that a POD can be launched without istio-proxy sidecar,
when the istiocni DS pod is shutting down as it remove the istio cni chained plugin configuration
from CNI config file(/etc/cni/net.d/10-ptp.conflist).
2. Daemonset ISTIO-CNI-NODE conflicted the on-perm implementation of CNI config file Management.
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
annotations:
labels:
name: service_b
namespace: test
spec:
host: service_b.test.svc.cluster.local
trafficPolicy:
"listener":{
"name":"2.2.2.2_4080",
"address":{
"socket_address":{
"address":"2.2.2.2",
"port_value":4080
}
},
"filter_chains":[
{
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
annotations:
generation: 1
labels:
name: Service_A
namespace: test
spec:
host: Service_A.cluster.local