You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/ossm-migrating-a-cluster-wide-deployment-using-the-istio-revision-label-with-cert-manager.adoc
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,7 @@
8
8
9
9
This procedure performs a canary upgrade with the gradual migration of data plane namespaces for a cluster-wide deployment using the `istio.io/rev` label with cert-manager.
10
10
11
-
The `bookinfo` example application is being used for demonstration purposes with a minimal example for the `Istio` resource. For more information on configuration differences between the {SMProduct} 2 `ServiceMeshControlPlane` resource and the {SMProduct} 3 `Istio` resource, see "ServiceMeshControlPlane resource to Istio resource fields mapping".
11
+
The `bookinfo` example application is being used for demonstration purposes with a minimal example for the `Istio` resource. For more information on configuration differences between the {SMProduct} 2 `ServiceMeshControlPlane` resource and the {SMProduct} 3 `Istio` resource, see "Configuration fields mapping between Service Mesh 2 and Service Mesh 3".
12
12
13
13
You can follow these same steps with your own workloads
The command adds the following labels to the namespace:
48
-
+
49
-
.. The `istio.io/rev=ossm-3-v1-24-3` label: Ensures that any newly created or restarted pods in that namespace connect to the {SMProduct} 3.0 proxy. In this example, the 3.0 revision is named `ossm-3-v1-24-3`.
50
-
+
51
-
.. The `maistra.io/ignore-namespace: "true"` label: Disables sidecar injection for {SMProduct} 2.6 proxies in the namespace so {SMProduct} 2.6 stops injecting proxies in this namespace, and any new proxies are injected by {SMProduct} 3.0. Without this label, the {SMProduct} 2.6 injection webhook tries to inject the pod and the injected sidecar proxy will refuse to start since it will have both the {SMProduct} 2.6 and the {SMProduct} 3.0 Container Network Interface(CNI) annotations.
49
+
Running the command performs the following actions:
50
+
51
+
.. Removes the `istio-injection` label: This label takes precedence over `istio.io/rev` label, which must be removed. Leaving the `istio-injection=enabled` label applied prevents proxy injection.
52
+
53
+
.. Adds the `istio.io/rev=ossm-3-v1-24-3` label: This label ensures that any newly created or restarted pods in the namespace connect to the {SMProduct} 3.0 proxy. In this example, the 3.0 revision is named `ossm-3-v1-24-3`.
54
+
55
+
.. Adds the `maistra.io/ignore-namespace: "true"` label: This label disables sidecar injection for {SMProduct} 2.6 proxies in the namespace so {SMProduct} 2.6 stops injecting proxies in this namespace, and any new proxies are injected by {SMProduct} 3.0. Without this label, the {SMProduct} 2.6 injection webhook tries to inject the pod and the injected sidecar proxy will refuse to start since it will have both the {SMProduct} 2.6 and the {SMProduct} 3.0 Container Network Interface(CNI) annotations.
52
56
+
53
57
[NOTE]
54
58
====
55
59
Once you apply the `maistra.io/ignore-namespace` label, any new pod that gets created in the namespace connects to the {SMProduct} 3.0 proxy. Workloads can still communicate with each other regardless of which controlplane they are connected to.
56
60
====
57
-
+
58
-
. The command also removes the following label from the namespace:
59
-
60
-
.. The `istio-injection` label: Takes precedence over `istio.io/rev` label, so it must be removed. Leaving the `istio-injection=enabled` label applied prevents proxy injection.
61
61
62
62
. Restart the workloads by using one of the following options:
0 commit comments