Skip to main content
logoTetrate Istio SubscriptionVersion: Next

Installation

Following are the steps to install the TIS Istio registry sync add-on.

Prerequisites

  • Helm is installed
  • Acquired credentials from Tetrate to access the TIS add-ons repository.
tip

Tetrate uses the same credentials for FIPS and add-on repositories. If you have already acquired credentials for the FIPS repository, you can use the same credentials to access the TIS add-on repository.

Installation

Before installing Istio Registry Sync, you need to add the TIS Helm repository to your Helm client:

helm repo add tis-addons https://tis.tetrate.io/charts
helm repo update

Set the required variables for TIS credentials:

export TIS_USER="<tis-username>"
export TIS_PASS="<tis-password>"

Then create a secret for the TIS add-ons repository. This will be used later to pull the Istio Registry Sync image from the TIS add-ons repository.

kubectl create secret docker-registry tetrate-addons-creds \
--docker-server="addon-containers.istio.tetratelabs.com" \
--docker-username=${TIS_USER} \
--docker-password=${TIS_PASS} \
--docker-email="${USER}@" \
-n tis

Then follow the instructions for your service registry to see how you can set necessary permissions and configurations to allow Istio Registry Sync to access the registry.

  1. AWS Cloud Map
  2. Consul

Uninstallation

To uninstall/delete the istio-registry-sync deployment:

helm delete istio-registry-sync

This command removes all the Kubernetes components associated with the chart and deletes the release.

Helm Configuration

The following table lists the configurable parameters of the Istio registry sync chart and their default values.

KeyTypeDefaultDescription
affinityobject{}
cloudmap.regionstring""AWS Region to use to connect to Cloud Map
consul.endpointstring""Consul's endpoint to query service catalog
consul.namespacestring""Consul's namespace to search service catalog
consul.tokenstring""Consul's ACL token to access service catalog
fullnameOverridestring""
image.pullPolicystring"IfNotPresent"
image.repositorystring"addon-containers.istio.tetratelabs.com/istio-registry-sync"
image.tagstring"v0.5.1"
imagePullSecretslist[]
nameOverridestring""
nodeSelectorobject{}
podAnnotationsobject{}
podSecurityContextobject{}
publishNamespacestring""Istio Registry Sync publishes ServiceEntry into this namespace or the namespace it is deployed into
resourcesobject{}
resyncPeriodint5Interval in seconds between syncing
securityContextobject{}
serviceAccount.annotationsobject{}
serviceAccount.createbooltrue
serviceAccount.namestring""If not set and create is true, a name is generated using the fullname template
tolerationslist[]