Istio AKS addon

[miwithro]

Currently in public preview: https://learn.microsoft.com/azure/aks/istio-deploy-addon

Tentatively targeting early October for GA of this add-on

[ghost]

@Azure/aks-pm issue needs labels

[ghost]

@Azure/aks-pm issue needs labels

[adamyager]

Istio add on @shashank to add details.

I am sure you all love these questions early on, but they are important in planning for the end customer. Is there any expectation this will be GA in this Calendar year? Maybe by October?

[ghost]

@Azure/aks-pm issue needs labels

[ghost]

@Azure/aks-pm issue needs labels

[huangyingting]

@Azure/aks-pm is there any updates so far for GA date?

[ghost]

@Azure/aks-pm issue needs labels

[shashankbarsin]

@huangyingting tentatively targeting early Oct for GA of the addon

[ghost]

@Azure/aks-pm issue needs labels

[ghost]

@Azure/aks-pm issue needs labels

[ghost]

@Azure/aks-pm issue needs labels

[Vegoo89]

Hello. I would like to provide my own static IP for ingress gateway load balancer, but parameter is missing. Are there any plans to add it?

[ghost]

@Azure/aks-pm issue needs labels

[ghost]

@Azure/aks-pm issue needs labels

[ghost]

@Azure/aks-pm issue needs labels

[mdaslamansari]

@huangyingting tentatively targeting early Oct for GA of the addon

Is it still on track? Any tentative date?

[workwithprashant]

We are at end of October month. Is there ETA for GA release?

[joshbsemperis]

We are at the end of November. Is there an ETA for GA Release? @miwithro

[shashankbarsin]

Tentative ETA for the GA of this addon is January 2024. Before that we are currently working on public preview of few required capabilities within the addon - minor version upgrade control, bring your CA,...

[mdaslamansari]

Any latest updates on it? Please also advise the migration path for those who are using ISTIO open source to migrate to this managed addon...

[Vegoo89]

There are still issues that - in my opinion - prevents this from going GA.

As example, below issue involving support for node tolerations has been opened for months now: https://github.com/Azure/AKS/issues/3882

[shashankbarsin]

providing an update on the improvements and timelines -

• beyond the addon that was released in public preview last year, the following capabilities have been introduced this month under preview:
  • canary upgrade: for minor revision upgrade, user can initiate canary upgrades for istio resulting in istiod and ingresses of new revisions being deployed side by side with previous revisions. user also controls restarting their workloads to get new versions of istio-proxy sidecars. They can then go on to either complete or roll back the upgrade
  • plug in CA - instead of using self-signed root certificate and key, which is the case with default installation of the addon, users can provide their own certificates and key for Istio CA.
• currently working on getting the addon and the above capabilities to GA. because of changes in release cadence, we are tentatively tracking for GA of the addon around February end instead of January

[shashankbarsin]

@mdaslamansari - migration from OSS Istio to managed addon Istio is on our backlog, but we are planning to pick up that work only after the GA of the addon (which helps new installations). There are challenges associated with such a migration, specifically on how we handle istio ingresses and CAs in such a migration. Once those details are finalized and we have a clear ETA on the migration, will share an update.

[shashankbarsin]

@Vegoo89 - we are looking into the addon scheduling bug you shared. Will get back with an update soon