Istio operator installs kyma istio-resources

[strekm]

Description

Enhance istio operator reconcile loop with installation on Istio related resources that are part of kyma istio resources component. Make sure that this implementation is not clashing with helm reconciler in migration period. Once this implementation is rolled out to all envs and it is not part of kyma components list, istio-resources will be deleted.

Consider applying default kyma gateway as a part of istio operator for short period of time to be able to delete istio-resources component from kyma. Later on kyma default gateway and kyma default domain will be completely moved to api-gateway operator (module). Have in mind: kyma-project/kyma#17616

There's no need to enhance Istio API.

ACs:

• Istio operator installs istio resources
• istio operator and helm reconciler are not conflicting over istio resources
• istio resources are labeled as managed by istio operator
• any manual changes done to installed resources are reconciled to default settings
• documentation created
• integration test created / updated

Reasons

modularisation of kyma components

Open questions

• Do we need monitoring / dashboards configurable? - For now we apply always, no configuration.
• Do we need to restart IGW or Proxies on any changes of istio-resources ? -> follow-up task created for this in Backlog
• Both Reconciler and Istio Operator will apply resources, but in the end definition would be almost the same. - Should be okay for the time being.

DoD:

• provide documentation
• release notes and What's New updates for Kyma customers
• provide unit tests
• provide integration tests
• test on production-like environment
• verify resource limits
  - [ ] followup issue
• PR reviewer will verify code coverage and evaluate if it is acceptable

PRs

• Additional Istio resources into the reconciliation #346

Attachments

https://github.com/kyma-project/kyma/tree/main/resources/istio-resources