This plugin is a WORK IN PROGRESS.
acorn-istio-plugin is an Acorn plugin to enable mTLS in Acorn using Istio.
This plugin is responsible for two things:
- Adding service mesh annotations to Acorn project namespaces, which will then be propagated to app namespaces.
- Kill Istio sidecars on Acorn jobs, once the other containers in the job have completed.
make build
Your local Kubernetes cluster needs to have Acorn installed with the following options at a minimum:
acorn install --set-pod-security-enforce-profile=false --propagate-project-label="istio-injection"
Your cluster also needs to have Istio installed. Ingress and egress gateways are not needed, but Istio base and Istiod are required. The easiest way to do this is with Helm:
helm repo add istio https://istio-release.storage.googleapis.com/charts
helm repo update istio
helm install istio istio/base -n istio-system --create-namespace
helm install istiod istio/istiod -n istio-system
Run the plugin with Acorn:
acorn run --name acorn-istio-plugin -i .