Skip to content

Instantly share code, notes, and snippets.

@thesurlydev
Last active September 21, 2022 16:41
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save thesurlydev/c287ae931df4df623c3c169c58514e7b to your computer and use it in GitHub Desktop.
Save thesurlydev/c287ae931df4df623c3c169c58514e7b to your computer and use it in GitHub Desktop.
Test install of Istio Ambient
NAMESPACE NAME READY STATUS RESTARTS AGE
argo-workflows-system nrf-argo-workflows-server-7ddf5995b5-kpsbd 1/1 Running 0 40h
argo-workflows-system nrf-argo-workflows-workflow-controller-946cdc987-pn9sw 1/1 Running 0 40h
argocd-system nrf-argocd-application-controller-0 1/1 Running 0 40h
argocd-system nrf-argocd-applicationset-controller-864b5ffcd5-zqzlt 1/1 Running 0 43h
argocd-system nrf-argocd-dex-server-7fdc5d787c-vl45c 1/1 Running 0 40h
argocd-system nrf-argocd-image-updater-55d7998865-r6mkq 1/1 Running 0 43h
argocd-system nrf-argocd-notifications-controller-976f6d79f-d7gzj 1/1 Running 0 43h
argocd-system nrf-argocd-redis-9b5b7457c-w725q 2/2 Running 0 40h
argocd-system nrf-argocd-repo-server-68db685b84-9rtv6 1/1 Running 0 43h
argocd-system nrf-argocd-server-765889f47b-m79rq 1/1 Running 0 40h
cert-manager-system nrf-cert-manager-898899f59-gsqws 1/1 Running 0 40h
cert-manager-system nrf-cert-manager-cainjector-7f4998b65c-955cn 1/1 Running 0 43h
cert-manager-system nrf-cert-manager-webhook-776d5d7585-jhzb4 1/1 Running 0 40h
crossplane-system crossplane-5984755bb7-4sxmv 1/1 Running 0 43h
crossplane-system crossplane-rbac-manager-c5dd88496-nbcwp 1/1 Running 0 40h
crossplane-system provider-aws-d87796863f95-9d9cbd4bb-jvtpf 1/1 Running 0 40h
crossplane-system provider-helm-f6c5ce0da0dd-758d7f6456-lslqx 1/1 Running 0 40h
crossplane-system provider-kubernetes-e3a9c3ae909b-57b8f7bf95-lpqj8 1/1 Running 0 40h
external-dns-system nrf-external-dns-55bdb69956-4l6cr 1/1 Running 0 40h
grafana-operator-system nrf-grafana-operator-768f6696f7-5lzg2 1/1 Running 0 40h
ingress-nginx-system nrf-ingress-nginx-controller-84b9868ff9-xk9bf 1/1 Running 0 40h
istio-system istio-cni-node-8mqzz 1/1 Running 0 24h
istio-system istio-cni-node-khsm4 1/1 Running 1 13h
istio-system istio-cni-node-t9bhr 1/1 Running 0 24h
istio-system istio-ingressgateway-57c74cf745-5nb9b 1/1 Running 0 24h
istio-system istio-operator-86457dcfbb-ln79x 1/1 Running 0 40h
istio-system istiod-7f57456bbd-9z5nq 1/1 Running 0 16h
istio-system ztunnel-flg9c 0/1 Running 0 13h
istio-system ztunnel-wpfxk 0/1 Running 0 19h
istio-system ztunnel-xbpj2 0/1 Running 0 19h
kube-prometheus-system alertmanager-npe-core-alertmanager-0 2/2 Running 0 43h
kube-prometheus-system alertmanager-npe-core-alertmanager-1 2/2 Running 0 40h
kube-prometheus-system alertmanager-npe-core-alertmanager-2 2/2 Running 0 40h
kube-prometheus-system nrf-kube-prometheus-stack-operator-f86c67dc4-ccwz4 1/1 Running 0 40h
kube-prometheus-system nrf-kube-state-metrics-56cbfbfd5-4w78x 1/1 Running 0 40h
kube-prometheus-system nrf-prometheus-node-exporter-nxtn4 1/1 Running 0 13h
kube-prometheus-system nrf-prometheus-node-exporter-r69kg 1/1 Running 0 44h
kube-prometheus-system nrf-prometheus-node-exporter-s8k2k 1/1 Running 0 24h
kube-prometheus-system prometheus-npe-core-prometheus-0 2/2 Running 0 24h
kube-prometheus-system prometheus-npe-core-prometheus-1 2/2 Running 0 13h
kube-prometheus-system prometheus-npe-core-prometheus-2 2/2 Running 0 44h
kube-system aws-node-bv2wc 1/1 Running 0 44h
kube-system aws-node-kqmjf 1/1 Running 0 13h
kube-system aws-node-w2v5c 1/1 Running 0 24h
kube-system coredns-85d5b4454c-bmm7r 1/1 Running 0 43h
kube-system coredns-85d5b4454c-gkpvs 1/1 Running 0 40h
kube-system ebs-csi-controller-57d8d678-2grkf 5/5 Running 0 40h
kube-system ebs-csi-controller-57d8d678-cfwnv 5/5 Running 0 43h
kube-system ebs-csi-node-bt4d2 3/3 Running 0 13h
kube-system ebs-csi-node-hmk9h 3/3 Running 0 44h
kube-system ebs-csi-node-sg7cg 3/3 Running 0 24h
kube-system kube-proxy-kjnqj 1/1 Running 0 13h
kube-system kube-proxy-nsczv 1/1 Running 0 24h
kube-system kube-proxy-zcmzp 1/1 Running 0 44h
kube-system nrf-metrics-server-64f8575c7-nr7mg 1/1 Running 0 40h
kube-system spotinst-kubernetes-cluster-controller-5dfdb95d4d-4t26g 1/1 Running 0 40h
kubenab-system nrf-kubenab-587b47778f-62bpf 1/1 Running 0 40h
kubenab-system nrf-kubenab-587b47778f-9wlv8 1/1 Running 0 40h
kubenab-system nrf-kubenab-587b47778f-bjdt4 1/1 Running 0 40h
kubenab-system nrf-kubenab-587b47778f-grszc 1/1 Running 0 43h
kubenab-system nrf-kubenab-587b47778f-ssmw4 1/1 Running 0 43h
operator-secrets-system operator-secrets-controller-manager-664b74c665-c29cx 1/1 Running 0 40h
operator-twistlock-system operator-twistlock-controller-manager-678b886d75-j8rxd 1/1 Running 0 40h
operator-twistlock-system twistlock-defender-ds-2dcl8 1/1 Running 0 44h
operator-twistlock-system twistlock-defender-ds-dll2h 1/1 Running 0 24h
operator-twistlock-system twistlock-defender-ds-h9p4h 1/1 Running 0 13h
velero-system velero-6bfbcdf947-7597t 1/1 Running 0 40h
#!/bin/bash
set -e
HUB="gcr.io/istio-testing"
TAG="0.0.0-ambient.191fe680b52c1754ee72a06b3e0d3f9d116f2e82"
ARCH="osx-arm64"
DIR="istio-${TAG}"
NS="istio-system"
kind create cluster --config=- <<EOF
kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
name: ambient
nodes:
- role: control-plane
- role: worker
- role: worker
EOF
echo
echo "Downloading and uncompressing ambient..."
wget https://storage.googleapis.com/istio-build/dev/${TAG}/istio-${TAG}-${ARCH}.tar.gz
tar -xzf istio-${TAG}-${ARCH}.tar.gz
rm istio-${TAG}-${ARCH}.tar.gz
echo
echo "Creating ${NS} namespace"
kubectl create ns ${NS}
echo
echo "Installing operator via helm..."
helm install -n ${NS} istio-operator ${DIR}/manifests/charts/istio-operator
echo
echo "Sleeping a bit..."
sleep 5
echo
echo "Installing control plane..."
kubectl apply -f - <<EOF
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
namespace: $NS
name: example-istiocontrolplane
spec:
profile: ambient
hub: $HUB
tag: $TAG
meshConfig:
accessLogFile: /dev/stdout
defaultHttpRetryPolicy:
attempts: 0
EOF
@thesurlydev
Copy link
Author

The above doesn't work with Mac/M1. Later found out this is a known issue as of 9/21.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment