istio.io/istio@v0.0.0-20240520182934-d79c90f27776/manifests/charts/install-OpenShift.md (about)

     1  # Installing Istio on OpenShift using Helm
     2  
     3  > Note: Be aware of the [platform setup required for OpenShift](https://istio.io/latest/docs/setup/platform-setup/openshift/) when installing Istio.
     4  
     5  To install with Helm, you must first create the namespace that you wish to install in if the namespace does not exist already. The default namespace used is `istio-system` and can be created as follows:
     6  
     7  ```console
     8  kubectl create namespace istio-system
     9  ```
    10  
    11  Istio's helm charts come with a common `openshift` profile that can be used during installation.
    12  
    13  The installation process using the Helm charts is as follows:
    14  
    15  1) `base` chart creates cluster-wide CRDs, cluster bindings and cluster resources. It is possible to change the namespace from `istio-system` but it is not recommended.
    16  
    17  ```console
    18  helm install istio-base -n istio-system manifests/charts/base --set profile=openshift
    19  ```
    20  
    21  2) `istio-cni` chart installs the CNI plugin. This should be installed after the `base` chart and prior to `istiod` chart. Need to add `--set pilot.cni.enabled=true` to the `istiod` install to enable its usage.
    22  
    23  ```console
    24  helm install istio-cni -n kube-system manifests/charts/istio-cni --set profile=openshift
    25  ```
    26  
    27  3) `istio-control/istio-discovery` chart installs a revision of istiod.
    28  
    29  ```console
    30   helm install -n istio-system istiod manifests/charts/istio-control/istio-discovery --set profile=openshift
    31  ```
    32  
    33  4) `gateways` charts install a load balancer with `ingress` and `egress`.
    34  
    35  Ingress secrets and access should be separated from the control plane.
    36  
    37  ```console
    38  helm install -n istio-system istio-ingress manifests/charts/gateways/istio-ingress --set profile=openshift
    39  ```
    40  
    41  Egress secrets and access should be separated from the control plane.
    42  
    43  ```console
    44  helm install -n istio-system istio-egress manifests/charts/gateways/istio-egress --set profile=openshift
    45  ```