Today when we use Rancher to deploy Istio, it uses the istio-init container to manipulate the networking in order to direct traffic through the proxy. This of course requires that every app pod run with net-admin privileges which is very undesirable. Istio offers the CNI route which eliminates the need for the init container. Although I understand the CNI is still alpha, is there a planned date to offer the CNI method in Rancher? If not, are there any gotchas if we decide to implement Istio “manually” so that we could leverage the CNI plugin?
Related Topics
Topic | Replies | Views | Activity | |
---|---|---|---|---|
Rancher Release v2.3.0-alpha5 - Preview of Istio | 1 | 1771 | June 19, 2019 | |
Rancher installed istio performance report | 0 | 248 | May 30, 2023 | |
Weave-net as "CNI infrastructure service" | 1 | 911 | March 6, 2017 | |
Expose service using rancher+istio | 0 | 145 | March 19, 2024 | |
Skywalking with rancher 2.3 | 0 | 730 | September 7, 2019 |