vendredi 1 avril 2022

Install Istio on OKE Oracle Linux 8.5

Tips, when installing Istio and the sample application Bookinfo on an OKE cluster running Oracle Linux 8.5 you may face the error

error   Command error output: xtables parameter problem: iptables-restore: unable to initialize table 'nat'

You need to enable CNI support at the installation

istioctl manifest apply --set components.cni.enabled=true

On working nodes, you can apply the following commands as root and apply the configuration for restart.

modprobe br_netfilter ; modprobe nf_nat ; modprobe xt_REDIRECT ; modprobe xt_owner; modprobe iptable_nat; modprobe iptable_mangle; modprobe iptable_filter
cat  <<EOF | sudo tee /etc/modules-load.d/99-istio-modules.conf
# These modules need to be loaded on boot so that Istio (as required by
# Kubeflow) runs properly.
#
# See also: https://github.com/istio/istio/issues/23009

br_netfilter
nf_nat
xt_REDIRECT
xt_owner
iptable_nat
iptable_mangle
iptable_filter
EOF

You will be able to deploy the application without troubles

$ kubectl get pods
NAME                              READY   STATUS    RESTARTS   AGE
details-v1-79f774bdb9-87x6d       2/2     Running   0          35m
productpage-v1-6b746f74dc-zg4tb   2/2     Running   0          35m
ratings-v1-b6994bb9-vtcqz         2/2     Running   0          35m
reviews-v1-545db77b95-fldn4       2/2     Running   0          35m
reviews-v2-7bf8c9648f-mj26p       2/2     Running   0          35m
reviews-v3-84779c7bbc-2jvjt       2/2     Running   0          35m

Documentation
https://docs.oracle.com/en-us/iaas/Content/ContEng/Tasks/contengistio-intro-topic.htm
https://istio.io/latest/docs/setup/getting-started/
https://istio.io/latest/docs/examples/bookinfo/

Issue
https://github.com/istio/istio/issues/23009