Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removal of Istio component (#2836) #2863

Merged
merged 3 commits into from
Jan 17, 2022
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 1 addition & 7 deletions .devcontainer/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,6 @@ ARG USER_GID=$USER_UID

ARG HELM_VERSION=3.3.1
ARG KUBECTL_VERSION=1.22.4
ARG ISTIOCTL_VERSION=1.8.1

RUN : INSTALL APT REQUIREMENTS \
&& export DEBIAN_FRONTEND=noninteractive \
Expand All @@ -32,12 +31,7 @@ RUN : INSTALL HELM BINARY \
&& curl -fsSLO https://storage.googleapis.com/kubernetes-release/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl \
&& chmod +x ./kubectl \
&& mv ./kubectl /usr/local/bin/kubectl \
&& kubectl version --client \
&& : INSTALL ISTIOCTl BINARY \
&& curl -fsSLO https://github.com/istio/istio/releases/download/${ISTIOCTL_VERSION}/istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz \
&& tar -xzof istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz -C /usr/local/bin istioctl \
&& rm istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz \
&& chmod +x /usr/local/bin/istioctl
&& kubectl version --client

RUN : INSTALL GEM REQUIREMENTS \
&& gem install \
Expand Down
6 changes: 0 additions & 6 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,6 @@ ARG USER_GID=$USER_UID

ARG HELM_VERSION=3.3.1
ARG KUBECTL_VERSION=1.22.4
ARG ISTIOCTL_VERSION=1.8.1

ENV EPICLI_DOCKER_SHARED_DIR=/shared

Expand All @@ -27,11 +26,6 @@ RUN : INSTALL APT REQUIREMENTS \
&& chmod +x ./kubectl \
&& mv ./kubectl /usr/local/bin/kubectl \
&& kubectl version --client \
&& : INSTALL ISTIOCTL BINARY \
&& curl -fsSLO https://github.com/istio/istio/releases/download/${ISTIOCTL_VERSION}/istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz \
&& tar -xzof istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz -C /usr/local/bin istioctl \
&& rm istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz \
&& chmod +x /usr/local/bin/istioctl \
\
&& : INSTALL GEM REQUIREMENTS \
&& gem install \
Expand Down

This file was deleted.

This file was deleted.

This file was deleted.

This file was deleted.

1 change: 0 additions & 1 deletion ansible/playbooks/roles/preflight/defaults/main.yml
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,6 @@ supported_oses:
unsupported_apps:
x86_64: []
aarch64:
- istio
- pgbouncer
- pgpool

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -205,10 +205,6 @@ registry:2
# applications
bitnami/pgpool:4.2.4
bitnami/pgbouncer:1.16.0
# istio
istio/pilot:1.8.1
istio/proxyv2:1.8.1
istio/operator:1.8.1
epiphanyplatform/keycloak:14.0.0
rabbitmq:3.8.9
# K8s
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -203,10 +203,6 @@ registry:2
# applications
bitnami/pgpool:4.2.4
bitnami/pgbouncer:1.16.0
# istio
istio/pilot:1.8.1
istio/proxyv2:1.8.1
istio/operator:1.8.1
epiphanyplatform/keycloak:14.0.0
rabbitmq:3.8.9
# K8s
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -240,10 +240,7 @@ registry:2
# applications
bitnami/pgpool:4.2.4
bitnami/pgbouncer:1.16.0
# istio
istio/pilot:1.8.1
istio/proxyv2:1.8.1
istio/operator:1.8.1

epiphanyplatform/keycloak:14.0.0
rabbitmq:3.8.9
# K8s
Expand Down
1 change: 1 addition & 0 deletions docs/changelogs/CHANGELOG-2.0.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@
### Removed

- [#2834](https://github.com/epiphany-platform/epiphany/issues/2834) - Removal of Hashicorp Vault component
- [#2836](https://github.com/epiphany-platform/epiphany/issues/2836) - Removal of Istio component
- [#2837](https://github.com/epiphany-platform/epiphany/issues/2837) - Removal of Apache Ignite component

### Deprecated
Expand Down
1 change: 0 additions & 1 deletion docs/home/ARM.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,6 @@ Besides making sure that the selected providers, operating systems, components a
| auth-service | :heavy_check_mark: |
| pgpool | :x: |
| pgbouncer | :x: |
| istio | :x: |

***Notes***

Expand Down
1 change: 0 additions & 1 deletion docs/home/COMPONENTS.md
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,6 @@ Note that versions are default versions and can be changed in certain cases thro
| Pgpool | 4.2.4 | https://www.pgpool.net/ | [License](https://www.pgpool.net/mediawiki/index.php/pgpool-II_License) |
| Alertmanager | 0.23.0 | https://github.com/prometheus/alertmanager | [Apache License 2.0](https://github.com/prometheus/alertmanager/blob/master/LICENSE) |
| Apache2 | 2.4.29 | https://httpd.apache.org/ | [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0) |
| Istio | 1.8.1 | https://github.com/istio/istio | [Apache License 2.0](https://github.com/istio/istio/blob/master/LICENSE) |

## Epicli binary dependencies

Expand Down
22 changes: 11 additions & 11 deletions docs/home/DEPRECATION-NOTE.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,25 +12,25 @@ The role related to Hashicorp Vault has never been developed beyond MVP/PoC stag
Removed: Epiphany 2.0
Issue: [2834](https://github.com/epiphany-platform/epiphany/issues/2834)

The list of components to be deprecated:

- Logstash

The functionality that the Logstash is serving in Epiphany - exporting csv can right now be achieved using the Open Distro for Elasticsearch plugin. The Logstash in this version is prone to log4j issue and this is also the reason why should be removed.

Planed removal: Epiphany 2.0
Issue: [2833](https://github.com/epiphany-platform/epiphany/issues/2833)

- Istio

We are considering replacement of Istio component with different solution. Additionally, Istio causes problems during upgrade of Kubernetes.

Planed removal: Epiphany 2.0
Removed: Epiphany 2.0
Issue: [2836](https://github.com/epiphany-platform/epiphany/issues/2836)

- Apache Ignite

Apache Ignite is prone to 1.x log4j issue.

Planed removal: Epiphany 2.0
Removed: Epiphany 2.0
Issue: [2837](https://github.com/epiphany-platform/epiphany/issues/2837)

The list of components to be deprecated:

- Logstash

The functionality that the Logstash is serving in Epiphany - exporting csv can right now be achieved using the Open Distro for Elasticsearch plugin. The Logstash in this version is prone to log4j issue and this is also the reason why should be removed.

Planed removal: Epiphany 2.0
Issue: [2833](https://github.com/epiphany-platform/epiphany/issues/2833)
5 changes: 2 additions & 3 deletions docs/home/SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -129,11 +129,10 @@ different values. The list does not include ports that are bound to the loopback

- 80 - deb/rpm package repository (httpd is stopped at the end of installation)
- 5000 - Docker image registry

### Connection protocols and ciphers used by components in Epiphany

Below you can find list of cipersuites and protocols used for communication set in Epiphany on per component basis. This
doesn't contain information about potentially deprecated components: Apache Ignite, Istio.
Below you can find list of cipersuites and protocols used for communication set in Epiphany on per component basis.

1. OS services:

Expand Down
115 changes: 0 additions & 115 deletions docs/home/howto/ISTIO.md

This file was deleted.

1 change: 0 additions & 1 deletion docs/home/howto/KUBERNETES.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,6 @@ Currently, Epiphany provides the following predefined applications which may be
- auth-service (Keycloak)
- pgpool
- pgbouncer
- istio

All of them have
[default configuration](https://github.com/epiphany-platform/epiphany/blob/develop/schema/common/defaults/configuration/applications.yml).
Expand Down
33 changes: 0 additions & 33 deletions docs/home/howto/UPGRADE.md
Original file line number Diff line number Diff line change
Expand Up @@ -328,39 +328,6 @@ Before K8s version upgrade make sure that deprecated API versions are not used:
- [v1.21](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md)
- [v1.22](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md)

### Upgrade

---
**NOTE**

If the K8s cluster that is going to be upgraded has the Istio control plane application deployed, issues can occur. The
default [profiles](https://istio.io/latest/docs/setup/additional-setup/config-profiles/) we currently support for
installing Istio only deploy a single replica for the control services with a `PodDisruptionBudgets` value of 0. This
will result in the following error while draining pods during an upgrade:

```shell
Cannot evict pod as it would violate the pods disruption budget.
```

As we currently don't support any kind of advanced configuration of the Istio control plane components outside the
default profiles, we need to scale up all components manually before the upgrade. This can be done with the following
command:

```shell
kubectl scale deploy -n istio-system --replicas=2 --all
```

After the upgrade, the deployments can be scaled down to the original capacity:

```shell
kubectl scale deploy -n istio-system --replicas=1 --all
```

**Note: The ```istio-system``` namespace value is the default value and should be set to whatever is being used in the
Istio application configuration.**

---

## PostgreSQL upgrade

---
Expand Down
Loading