Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Provision k3d with cni enabled by default #1373

Closed
3 tasks done
Tracked by #15347
strekm opened this issue Sep 12, 2022 · 1 comment
Closed
3 tasks done
Tracked by #15347

Provision k3d with cni enabled by default #1373

strekm opened this issue Sep 12, 2022 · 1 comment
Assignees
@barchw
Labels
area/security Issues or PRs related to security

Comments

@strekm
Copy link
Contributor

strekm commented Sep 12, 2022 •
edited by barchw
Loading

Description

For Kyma 2.8 Istio will be bumped to Istio 1.15 and Istio cni plugin will be used instead of Istio init-containers. Because of that for k3d provisioning additional setup needs to be done: enabling cni plugin via kubelet params.

ACs:

  • cni is enabled for k3d cluster
  • kyma 2.6 installs / upgrades (no Istio cni is used)
  • kyma with Istio using cni plugin installs / upgrades

Reasons

Security improvements

Attachments

part of: kyma-project/kyma#15347

PR with the change
@strekm strekm added the area/security Issues or PRs related to security label Sep 12, 2022
@strekm strekm mentioned this issue Sep 12, 2022
Closed
12 tasks
@barchw barchw self-assigned this Sep 16, 2022
@barchw barchw mentioned this issue Sep 21, 2022
Merged
@barchw
Copy link
Contributor

barchw commented Sep 21, 2022 •
edited
Loading

@barchw barchw removed their assignment Sep 21, 2022
@barchw barchw assigned barchw and unassigned barchw Sep 22, 2022
@dariusztutaj dariusztutaj self-assigned this Sep 27, 2022
@barchw barchw assigned barchw and unassigned dariusztutaj Sep 29, 2022
@strekm strekm closed this as completed Sep 29, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@barchw barchw

Labels
area/security Issues or PRs related to security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@strekm @dariusztutaj @barchw