Install with Helm
Follow this guide to install and configure an Istio mesh using Helm5.
The Helm charts used in this guide are the same underlying charts used when installing Istio via Istioctl6 or the Operator7.
This feature is currently considered alpha8.
Prerequisites
Perform any necessary platform-specific setup9.
Check the Requirements for Pods and Services10.
Install the Helm client11, version 3.6 or above.
Configure the Helm repository:
Installation steps
Create a namespace
istio-system
for Istio components:Install the Istio base chart which contains cluster-wide resources used by the Istio control plane:
Install the Istio discovery chart which deploys the
istiod
service:(Optional) Install an ingress gateway:
See Installing Gateways12 for in-depth documentation on gateway installation.
Verifying the installation
Status of the installation can be verified using Helm:
Updating your Istio configuration
You can provide override settings specific to any Istio Helm chart used above
and follow the Helm upgrade workflow to customize your Istio mesh installation.
The available configurable options can be found by using helm show values istio/<chart>
;
for example helm show values istio/gateway
.
Migrating from non-Helm installations
If you’re migrating from a version of Istio installed using istioctl
or
Operator to Helm (Istio 1.5 or earlier), you need to delete your current Istio
control plane resources and re-install Istio using Helm as described above. When
deleting your current Istio installation, you must not remove the Istio Custom Resource
Definitions (CRDs) as that can lead to loss of your custom Istio resources.
You can follow steps mentioned in the Istioctl uninstall guide13 or Operator uninstall guide depending upon your installation method.
Uninstall
You can uninstall Istio and its components by uninstalling the charts installed above.
List all the Istio charts installed in
istio-system
namespace:(Optional) Delete any Istio gateway chart installations:
Delete Istio discovery chart:
Delete Istio base chart:
Delete the
istio-system
namespace:
Uninstall stable revision label resources
If you decide to continue using the old control plane, instead of completing the update,
you can uninstall the newer revision and its tag by first issuing
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags={prod-canary} --set revision=canary -n istio-system | kubectl delete -f -
.
You must them uninstall the revision of Istio that it pointed to by following the uninstall procedure above.
If you installed the gateway(s) for this revision using in-place upgrades, you must also reinstall the gateway(s) for the previous revision manually, Removing the previous revision and its tags will not automatically revert the previously in-place upgraded gateway(s).
(Optional) Deleting CRDs installed by Istio
Deleting CRDs permanently removes any Istio resources you have created in your cluster. To permanently delete Istio CRDs installed in your cluster: