NOTE: This instruction documentation does not use Istio. But KFServing controller controls VirtualService so we must install it. Please refer to kfserving/issues/1336 for the detail.
There is no special step to install OpenShift Service Mesh for KFServing. We just follow the servicemesh installation documentation.
Install each operator by following the sections:
| git clone https://github.com/knative/serving.git | |
| git clone https://github.com/knative/networking.git | |
| git clone https://github.com/knative-sandbox/net-istio.git | |
| git clone https://github.com/knative-sandbox/net-contour.git | |
| git clone https://github.com/knative-sandbox/net-http01.git | |
| git clone https://github.com/knative-sandbox/net-certmanager.git | |
| git clone https://github.com/knative-sandbox/net-kourier.git | |
| git clone https://github.com/knative-sandbox/net-gateway-api.git |
| # Copyright 2018 The Knative Authors | |
| # | |
| # Licensed under the Apache License, Version 2.0 (the "License"); | |
| # you may not use this file except in compliance with the License. | |
| # You may obtain a copy of the License at | |
| # | |
| # https://www.apache.org/licenses/LICENSE-2.0 | |
| # | |
| # Unless required by applicable law or agreed to in writing, software | |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| apiVersion: install.istio.io/v1alpha1 | |
| kind: IstioOperator | |
| spec: | |
| values: | |
| global: | |
| proxy: | |
| autoInject: enabled | |
| useMCP: false | |
| sidecarInjectorWebhook: | |
| rewriteAppHTTPProbe: true |
| spec: | |
| cluster-local-gateway: {} | |
| config: | |
| deployment: | |
| queueSidecarImage: registry.svc.ci.openshift.org/openshift/knative-v0.13.2:knative-serving-queue | |
| domain: | |
| apps.knakayam-dev01.devcluster.openshift.com: "" | |
| network: | |
| domainTemplate: '{{.Name}}-{{.Namespace}}.{{.Domain}}' | |
| ingress.class: kourier.ingress.networking.knative.dev |
| # Copyright 2020 The Knative Authors | |
| # | |
| # Licensed under the Apache License, Version 2.0 (the "License"); | |
| # you may not use this file except in compliance with the License. | |
| # You may obtain a copy of the License at | |
| # | |
| # http://www.apache.org/licenses/LICENSE-2.0 | |
| # | |
| # Unless required by applicable law or agreed to in writing, software | |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| knative-serving/networking-istio-74fd45bcd-2h25n[networking-istio]: {"level":"info","ts":"2020-03-27T01:24:21.589Z","logger":"istiocontroller.istio-ingress-controller.status-manager","caller":"status/status.go:254","msg":"Queuing probe for http://projected-config-map-volume-vkeoxqos.serving-tests:80, IP: 10.24.11.2:80 (depth: 0)","commit":"54d939d","knative.dev/controller":"istio-ingress-controller"} | |
| knative-serving/networking-istio-74fd45bcd-2h25n[networking-istio]: {"level":"info","ts":"2020-03-27T01:24:21.589Z","logger":"istiocontroller.istio-ingress-controller.status-manager","caller":"status/status.go:254","msg":"Queuing probe for http://projected-config-map-volume-vkeoxqos.serving-tests.svc:80, IP: 10.24.11.2:80 (depth: 0)","commit":"54d939d","knative.dev/controller":"istio-ingress-controller"} | |
| knative-serving/networking-istio-74fd45bcd-2h25n[networking-istio]: {"level":"info","ts":"2020-03-27T01:24:21.589Z","logger":"istiocontroller.istio-ingress-controller.status-manager","caller":"status/status.go:25 |
mkdir /tmp/dev && cd /tmp/dev/
wget https://raw.githubusercontent.com/openshift/knative-serving/release-v0.11.1/openshift/release/knative-serving-v0.11.1.yaml
NOTE: This downloads v0.11.1 manifest. It should same version with $ oc get ks -n knative-serving.
| # Resources for AddonComponents prometheus component | |
| apiVersion: rbac.authorization.k8s.io/v1 | |
| kind: ClusterRole | |
| metadata: | |
| name: prometheus-istio-system | |
| labels: | |
| app: prometheus | |
| release: istio | |
| rules: |
| function prepare() { | |
| kubectl create ns bug | |
| kubectl create ns bug-alt | |
| kubectl label ns bug istio-injection=enabled | |
| kubectl label ns bug-alt istio-injection=enabled | |
| cat <<EOF | kubectl apply -f - | |
| apiVersion: "authentication.istio.io/v1alpha1" | |
| kind: "Policy" | |
| metadata: |