Has anyone tried or know of some project using Istio + Pulum

Question

Has anyone tried or know of some project using Istio + Pulumi in k8s eks

dry-pilot-73614 · Answer

I ve been wondering how sidecar injection works with Pulumi Would automatic sidecar injection <https istio io docs setup kubernetes sidecar injection automatic sidecar injection> mess with Pulumi s notion of state

flaky-receptionist-88878 · Answer

good question

flaky-receptionist-88878 · Answer

I might be able to validate this in the next week We re currently doing POC work with ISTIO and Pulumi separately We could combine them and see what happens

great-refrigerator-15198 · Answer

I ll probably be testing this today but installing ISTIO with `kubectl` `helm` if it messes up Pulumi s notion of state I ll let you know

flaky-receptionist-88878 · Answer

+1

flaky-receptionist-88878 · Answer

If current pulumi has issue with the auto injection of sidecar a fall back is to put the sidecar in the deployment definition so that it s not being dynamically added at runtime

great-refrigerator-15198 · Answer

mmmmm I ll keep that in mind thanks

flaky-receptionist-88878 · Answer

That is at least the theory our team was talking about when the subject came up

creamy-potato-29402 · Answer

< dry pilot 73614> < flaky receptionist 88878> < great refrigerator 15198> no sidecar injection is 100 compatible with Pulumi kubernetes

creamy-potato-29402 · Answer

Our design set out with this goal explicitly enable this

creamy-potato-29402 · Answer

This is in contrast to Terraform which is not compatible

creamy-potato-29402 · Answer

THe problem you may run into is that Istio involves ~23 new CRDs none of which are encoded in our await logic yet

creamy-potato-29402 · Answer

< great refrigerator 15198> if you run into any problems please do file them and I ll fix

great-refrigerator-15198 · Answer

Thanks < creamy potato 29402> I couldn t make much progress because I m trying to solve another problem I created a vpc and eks cluster using Pulumi installed istio using helm in a classic manner in the terminal using `helm` I started having timeouts on `pulumi destroy` and I see I can t delet the vpc and it s resource not even through aws console disappointed Somehow there s some resource holding some public address that doesn t allowme to detach the internet gateway or the rest of the network part of the stack

great-refrigerator-15198 · Answer

Istio created ENI and security group that even though I m admin I can t delete face with raised eyebrow

great-refrigerator-15198 · Answer

I made it I had to delete an elb created I don t know by who so that I could delete the vpn I guess I have to install istio using pulumi

flaky-receptionist-88878 · Answer

probably the install of istio has 1 or more services of type loadbalancer that get created as a part of installing istio