istio.io/istio@v0.0.0-20240520182934-d79c90f27776/releasenotes/notes/mesh-expansion.yaml (about)

     1  apiVersion: release-notes/v2
     2  kind: bug-fix
     3  area: installation
     4  issue:
     5  - 25933
     6  
     7  releaseNotes:
     8  - |
     9    **Added** port 15012 to the default list of ports for the `istio-ingressgateway` Service.
    10  - |
    11    **Deprecated** installation flags `values.global.meshExpansion.enabled` in favor of user-managed config and `values.gateways.istio-ingressgateway.meshExpansionPorts` in favor of `components.ingressGateways[name=istio-ingressgateway].k8s.service.ports`
    12  
    13  upgradeNotes:
    14  - title: Avoid use of mesh expansion installation flags
    15    content: |
    16      To ease setup for multicluster and virtual machines while giving more control to users, the `meshExpansion` and `meshExpansionPorts` installation flags have been deprecated, and port 15012 has been added to the default list of ports for the `istio-ingressgateway` Service.
    17  
    18      For users with `values.global.meshExpansion.enabled=true`, perform the following steps before upgrading Istio:
    19  
    20      1. Apply the code sample for exposing Istiod through ingress.
    21  
    22         {{< text bash >}}
    23         $ kubectl apply -f @samples/istiod-gateway/istiod-gateway.yaml@
    24         {{< /text >}}
    25  
    26         This removes `operator.istio.io/managed` labels from the associated Istio networking resources so that the Istio installer won't delete them. After this step, you can modify these resources freely.
    27  
    28      1. If `components.ingressGateways[name=istio-ingressgateway].k8s.service.ports` is overridden, add port 15012 to the list of ports:
    29  
    30         {{< text yaml >}}
    31              - port: 15012
    32                targetPort: 15012
    33                name: tcp-istiod
    34         {{< /text >}}
    35  
    36      1. If `values.gateways.istio-ingressgateway.meshExpansionPorts` is set, move all ports to `components.ingressGateways[name=istio-ingressgateway].k8s.service.ports` if they're not already present. Then, unset this value.
    37  
    38      1. Unset `values.global.meshExpansion.enabled`.