Installation

Following are the steps to install the TIS Istio registry sync add-on.

Prerequisites

• Helm is installed
• Acquired credentials from Tetrate to access the TIS add-ons repository.

tip

Tetrate uses the same credentials for FIPS and add-on repositories. If you have already acquired credentials for the FIPS repository, you can use the same credentials to access the TIS add-on repository.

Installation

Before installing Istio Registry Sync, you need to add the TIS Helm repository to your Helm client:

helm repo add tis-addons https://tis.tetrate.io/charts
helm repo update

Set the required variables for TIS credentials:

export TIS_USER="<tis-username>"
export TIS_PASS="<tis-password>"

Then create a secret for the TIS add-ons repository. This will be used later to pull the Istio Registry Sync image from the TIS add-ons repository.

kubectl create secret docker-registry tetrate-addons-creds \
    --docker-server="addon-containers.istio.tetratelabs.com" \
    --docker-username=${TIS_USER} \
    --docker-password=${TIS_PASS} \
    --docker-email="${USER}@" \
    -n tis

Then follow the instructions for your service registry to see how you can set necessary permissions and configurations to allow Istio Registry Sync to access the registry.

1. AWS Cloud Map
2. Consul

Uninstallation

To uninstall/delete the istio-registry-sync deployment:

helm delete istio-registry-sync

This command removes all the Kubernetes components associated with the chart and deletes the release.

Helm Configuration

The following table lists the configurable parameters of the Istio registry sync chart and their default values.

Key	Type	Default	Description
affinity	object	{}
cloudmap.region	string	""	AWS Region to use to connect to Cloud Map
consul.endpoint	string	""	Consul's endpoint to query service catalog
consul.namespace	string	""	Consul's namespace to search service catalog
consul.token	string	""	Consul's ACL token to access service catalog
fullnameOverride	string	""
image.pullPolicy	string	"IfNotPresent"
image.repository	string	"addon-containers.istio.tetratelabs.com/istio-registry-sync"
image.tag	string	"v0.5.1"
imagePullSecrets	list	[]
nameOverride	string	""
nodeSelector	object	{}
podAnnotations	object	{}
podSecurityContext	object	{}
publishNamespace	string	""	Istio Registry Sync publishes ServiceEntry into this namespace or the namespace it is deployed into
resources	object	{}
resyncPeriod	int	5	Interval in seconds between syncing
securityContext	object	{}
serviceAccount.annotations	object	{}
serviceAccount.create	bool	true
serviceAccount.name	string	""	If not set and create is true, a name is generated using the fullname template
tolerations	list	[]