ArgoCD - Downgrade Istio

StatCan / aaw-argoflow-azure

Kubeflow deployment powered by ArgoCD

2 stars 2 forks source link

ArgoCD - Downgrade Istio #35

Closed wg102 closed 3 years ago

wg102 commented 3 years ago

We want to be as aligned as possible with the istio version. Istio 1.5 is what is used for kubeflow 1.2. There is some discusssion about how to process to upgrade versions : https://github.com/kubeflow/kubeflow/issues/5176#issuecomment-725363913

We need to decide which version to use. According to documentation, anything above 1.4 (So it includes authorization Policies) would be ok.

rohank07 commented 3 years ago

Downgraded istio-operator to 1.7.0 but Istio-resources fails to sync kubeflow-userid & kubeflow-gateway... "the server could not find the requested resource"

wg102 commented 3 years ago

Just updating the number in the istio-operator file is not enought, as mentionned in a previous comment. We started to look more into the structure of the Gateway kind of file, and the EnvoyFilter, for 1.7 specifically

https://istio.io/v1.7/docs/reference/config/networking/envoy-filter/
https://istio.io/v1.7/docs/reference/config/networking/gateway/ a few things are different such as apiVersion, filtername, subFilterName etc. So far changing those as well has had no positive impact

rohank07 commented 3 years ago

Istio v1.7.0 does not support kubernetes v1.22.1 Also, to note Istio v1.10.0 does not support kubernetes (tested, but not supported) v1.22.1

https://istio.io/latest/docs/releases/supported-releases/#support-status-of-istio-releases

kind cluster

rohank07 commented 3 years ago

Production cluster aaw-prod-cc-00-aks kubernetes client version 1.21 server version 1.19

rohank07 commented 3 years ago

istio-operator pod log output