You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: _posts/2021-05-19-istio-functions.md
+27-5Lines changed: 27 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -47,7 +47,7 @@ In this blog post we'll give you a quick introduction so that you can start inte
47
47
48
48
We are using arkade, the open source marketplace to download CLIs and to install the apps we need. You can also do this the hard way if you prefer, just refer to the documentation or the helm chart for more.
49
49
50
-
You'll need OpenFaaS Pro for Istio to work. [Reach out to us](https://openfaas.com/pricing/) if you want to talk about options.
50
+
You'll need OpenFaaS Standard or Enterprise for Istio to work. OpenFaaS CE does its own load-balancing with Pod IPs instead. [Reach out to us](https://openfaas.com/pricing/) if you want to talk about options.
51
51
52
52
### Bootstrap the cluster
53
53
@@ -65,9 +65,11 @@ kind create cluster \
65
65
Once the KinD cluster has started, install Istio:
66
66
67
67
```bash
68
-
arkade install istio
68
+
arkade install istio --version 1.16.1
69
69
```
70
70
71
+
> Note: newer versions of Istio are available, however this was the last tested version when the blog post was written.
72
+
71
73
You can also install Istio using Helm or the istioctl tool, [see other options](https://istio.io/latest/docs/setup/install/).
72
74
73
75
Download the CLI for Istio so we can use it later:
@@ -76,11 +78,16 @@ Download the CLI for Istio so we can use it later:
76
78
arkade get istioctl
77
79
```
78
80
79
-
### Install OpenFaaS Pro
81
+
### Install OpenFaaS
82
+
83
+
OpenFaaS can be installed via Helm or arkade, the below flags for arkade can be converted to Helm values if you prefer.
80
84
81
-
Only OpenFaaS Pro works with Istio, the Community Edition (CE) is meant for hobbyists and experimentation.
85
+
If you see `--set gateway.directFunctions=true`, then you could convert that to the following for a values.yaml file:
82
86
83
-
Install OpenFaaS Pro using the following changes:
87
+
```yaml
88
+
gateway:
89
+
directFunctions: true
90
+
```
84
91
85
92
Setting `openfaasPro=true` enables the OpenFaaS Pro features.
86
93
@@ -92,8 +99,21 @@ The `gateway.probeFunctions=true` is required to remediate a race condition wher
92
99
93
100
The `operator.create` option is not strictly necessary, but preferred as it enables the "Function" CRD.
94
101
102
+
Install without mTLS:
103
+
104
+
```bash
105
+
arkade install openfaas \
106
+
--license-file $HOME/.openfaas/LICENSE \
107
+
--set openfaasPro=true \
108
+
--set operator.create=true \
109
+
--set gateway.directFunctions=true \
110
+
--set gateway.probeFunctions=true
111
+
```
112
+
95
113
The `istio.mtls` flag is optional, but when set encrypts the traffic between each of the pods in the `openfaas` and `openfaas-fn` namespace.
96
114
115
+
Here is the updated command to install with mTLS:
116
+
97
117
```bash
98
118
arkade install openfaas \
99
119
--license-file $HOME/.openfaas/LICENSE \
@@ -106,6 +126,8 @@ arkade install openfaas \
106
126
107
127
At this point everything is configured and you can use OpenFaaS.
108
128
129
+
Alternatively, follow the instructions in the [OpenFaaS documentation](https://docs.openfaas.com/deployment/pro/).
130
+
109
131
### Access OpenFaaS with an Istio Gateway
110
132
111
133
Create an Istio Gateway so that we can connect to the OpenFaaS Gateway and log in.
0 commit comments