Skip to content

Change in "istioctl install" behavior with IstioOperator bewteen v1.23 and v1.24 #55980

@sheidkamp

Description

@sheidkamp

Was running through some tests related to bumping our Istio version, and ran across a change in what MutatingWebhookConfigurations are created when doing a command line install with an IstioOperator spec. Basically, the default tag is no longer set and namespaces labelled istio-injection: enabled are not picked up until istioctl tag set default --revision=test-revision is run.

Not a huge change, but didn't see anything in the change/upgrade notes and was wondering if this change was intentional, and if this behavior is stable or may change in the future.

> istioctl version
Istio is not present in the cluster: no running Istio pods in namespace "istio-system"
client version: 1.23.6

> istioctl install -y -f - <<EOF
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: istio-system
spec:
  profile: minimal
  revision: test-revision
EOF

        |\
        | \
        |  \
        |   \
      /||    \
     / ||     \
    /  ||      \
   /   ||       \
  /    ||        \
 /     ||         \
/______||__________\
____________________
  \__       _____/
     \_____/

WARNING: Istio 1.23.0 may be out of support (EOL) already: see https://istio.io/latest/docs/releases/supported-releases/ for supported releases
✔ Istio core installed ⛵️
✔ Istiod installed 🧠
✔ Installation complete                                                                                                                             Made this installation the default for cluster-wide operations.


> kubectl get mutatingwebhookconfigurations
NAME                                   WEBHOOKS   AGE
istio-revision-tag-default             4          9s
istio-sidecar-injector-test-revision   2          14s
> istioctl version
Istio is not present in the cluster: no running Istio pods in namespace "istio-system"
client version: 1.24.0

> istioctl install -y -f - <<EOF
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  namespace: istio-system
spec:
  profile: minimal
  revision: test-revision
EOF

        |\
        | \
        |  \
        |   \
      /||    \
     / ||     \
    /  ||      \
   /   ||       \
  /    ||        \
 /     ||         \
/______||__________\
____________________
  \__       _____/
     \_____/

✔ Istio core installed ⛵️
  Processing resources for Istiod.
✔ Istiod installed 🧠
✔ Installation complete


> kubectl get mutatingwebhookconfigurations
NAME                                   WEBHOOKS   AGE
istio-sidecar-injector-test-revision   2          24s

Thanks!

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions