Removal of Istio component hitachienergy#2836

Signed-off-by: cicharka <[email protected]>

.devcontainer/Dockerfile

@@ -6,7 +6,6 @@ ARG USER_GID=$USER_UID
 
 ARG HELM_VERSION=3.3.1
 ARG KUBECTL_VERSION=1.22.4
-ARG ISTIOCTL_VERSION=1.8.1
 
 RUN : INSTALL APT REQUIREMENTS \
  && export DEBIAN_FRONTEND=noninteractive \
@@ -33,11 +32,6 @@ RUN : INSTALL HELM BINARY \
  && chmod +x ./kubectl \
  && mv ./kubectl /usr/local/bin/kubectl \
  && kubectl version --client \
- && : INSTALL ISTIOCTl BINARY \
- && curl -fsSLO https://github.com/istio/istio/releases/download/${ISTIOCTL_VERSION}/istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz \
- && tar -xzof istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz -C /usr/local/bin istioctl \
- && rm istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz \
- && chmod +x /usr/local/bin/istioctl
 
 RUN : INSTALL GEM REQUIREMENTS \
  && gem install \

Dockerfile

@@ -6,7 +6,6 @@ ARG USER_GID=$USER_UID
 
 ARG HELM_VERSION=3.3.1
 ARG KUBECTL_VERSION=1.22.4
-ARG ISTIOCTL_VERSION=1.8.1
 
 ENV EPICLI_DOCKER_SHARED_DIR=/shared
 
@@ -27,11 +26,6 @@ RUN : INSTALL APT REQUIREMENTS \
     && chmod +x ./kubectl \
     && mv ./kubectl /usr/local/bin/kubectl \
     && kubectl version --client \
-    && : INSTALL ISTIOCTL BINARY \
-    && curl -fsSLO https://github.com/istio/istio/releases/download/${ISTIOCTL_VERSION}/istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz \
-    && tar -xzof istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz -C /usr/local/bin istioctl \
-    && rm istioctl-${ISTIOCTL_VERSION}-linux-amd64.tar.gz \
-    && chmod +x /usr/local/bin/istioctl \
 \
     && : INSTALL GEM REQUIREMENTS \
     && gem install \

ansible/playbooks/roles/preflight/defaults/main.yml

@@ -17,7 +17,6 @@ supported_oses:
 unsupported_apps:
   x86_64: []
   aarch64:
-    - istio
     - pgbouncer
     - pgpool
 

ansible/playbooks/roles/repository/files/download-requirements/centos-7/requirements.x86_64.txt

@@ -211,10 +211,6 @@ vault:1.7.0
 epiphanyplatform/ignite:2.9.1
 bitnami/pgpool:4.2.4
 bitnami/pgbouncer:1.16.0
-# istio
-istio/pilot:1.8.1
-istio/proxyv2:1.8.1
-istio/operator:1.8.1
 epiphanyplatform/keycloak:14.0.0
 rabbitmq:3.8.9
 # K8s

ansible/playbooks/roles/repository/files/download-requirements/redhat-7/requirements.x86_64.txt

@@ -209,10 +209,6 @@ vault:1.7.0
 epiphanyplatform/ignite:2.9.1
 bitnami/pgpool:4.2.4
 bitnami/pgbouncer:1.16.0
-# istio
-istio/pilot:1.8.1
-istio/proxyv2:1.8.1
-istio/operator:1.8.1
 epiphanyplatform/keycloak:14.0.0
 rabbitmq:3.8.9
 # K8s

ansible/playbooks/roles/repository/files/download-requirements/ubuntu-20.04/requirements.x86_64.txt

@@ -246,10 +246,7 @@ vault:1.7.0
 epiphanyplatform/ignite:2.9.1
 bitnami/pgpool:4.2.4
 bitnami/pgbouncer:1.16.0
-# istio
-istio/pilot:1.8.1
-istio/proxyv2:1.8.1
-istio/operator:1.8.1
+
 epiphanyplatform/keycloak:14.0.0
 rabbitmq:3.8.9
 # K8s

docs/home/ARM.md

@@ -48,7 +48,6 @@ Besides making sure that the selected providers, operating systems, components a
 | auth-service | :heavy_check_mark: |
 | pgpool | :x: |
 | pgbouncer | :x: |
-| istio | :x: |
 
 ***Notes***
 

docs/home/COMPONENTS.md

@@ -42,7 +42,6 @@ Note that versions are default versions and can be changed in certain cases thro
 | Apache2                    | 2.4.29   | https://httpd.apache.org/                             | [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0) |
 | Hashicorp Vault            | 1.7.0    | https://github.com/hashicorp/vault                    | [Mozilla Public License 2.0](https://github.com/hashicorp/vault/blob/master/LICENSE) |
 | Hashicorp Vault Helm Chart | 0.11.0   | https://github.com/hashicorp/vault-helm               | [Mozilla Public License 2.0](https://github.com/hashicorp/vault-helm/blob/master/LICENSE.md) |
-| Istio                      | 1.8.1    | https://github.com/istio/istio                        | [Apache License 2.0](https://github.com/istio/istio/blob/master/LICENSE) |
 
 ## Epicli binary dependencies
 

docs/home/SECURITY.md

@@ -153,7 +153,7 @@ different values. The list does not include ports that are bound to the loopback
 ### Connection protocols and ciphers used by components in Epiphany
 
 Below you can find list of cipersuites and protocols used for communication set in Epiphany on per component basis. This
-doesn't contain information about potentially deprecated components: Apache Ignite, Istio, Hashicorp Vault.
+doesn't contain information about potentially deprecated components: Apache Ignite, Hashicorp Vault.
 
 1. OS services:
 

docs/home/howto/KUBERNETES.md

@@ -38,7 +38,6 @@ Currently, Epiphany provides the following predefined applications which may be
 - auth-service (Keycloak)
 - pgpool
 - pgbouncer
-- istio
 
 All of them have
 [default configuration](https://github.com/epiphany-platform/epiphany/blob/develop/schema/common/defaults/configuration/applications.yml).

docs/home/howto/UPGRADE.md

@@ -331,39 +331,6 @@ Before K8s version upgrade make sure that deprecated API versions are not used:
 - [v1.21](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.21.md)
 - [v1.22](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.22.md)
 
-### Upgrade
-
----
-**NOTE**
-
-If the K8s cluster that is going to be upgraded has the Istio control plane application deployed, issues can occur. The
-default [profiles](https://istio.io/latest/docs/setup/additional-setup/config-profiles/) we currently support for
-installing Istio only deploy a single replica for the control services with a `PodDisruptionBudgets` value of 0. This
-will result in the following error while draining pods during an upgrade:
-
-```shell
-Cannot evict pod as it would violate the pods disruption budget.
-```
-
-As we currently don't support any kind of advanced configuration of the Istio control plane components outside the
-default profiles, we need to scale up all components manually before the upgrade. This can be done with the following
-command:
-
-```shell
-kubectl scale deploy -n istio-system --replicas=2 --all 
-```
-
-After the upgrade, the deployments can be scaled down to the original capacity:
-
-```shell
-kubectl scale deploy -n istio-system --replicas=1 --all 
-```
-
-**Note: The ```istio-system``` namespace value is the default value and should be set to whatever is being used in the
-Istio application configuration.**
-
----
-
 ## PostgreSQL upgrade
 
 ---

schema/common/defaults/configuration/applications.yml

@@ -167,17 +167,3 @@ specification:
         RESERVE_POOL_SIZE: 25
         POOL_MODE: session
         CLIENT_IDLE_TIMEOUT: 0
-
-## --- istio ---
-
-  - name: istio
-    enabled: false
-    use_local_image_registry: true
-    namespaces:
-      operator: istio-operator # namespace where operator will be deployed
-      watched: # list of namespaces which operator will watch
-        - istio-system
-      istio: istio-system # namespace where istio control plane will be deployed
-    istio_spec:
-      profile: default # Check all possibilities https://istio.io/latest/docs/setup/additional-setup/config-profiles/
-      name: istiocontrolplane

schema/common/defaults/configuration/image-registry.yml

@@ -23,12 +23,6 @@ specification:
           file_name: vault-1.7.0.tar
         - name: "hashicorp/vault-k8s:0.10.0"
           file_name: vault-k8s-0.10.0.tar
-        - name: "istio/proxyv2:1.8.1"
-          file_name: proxyv2-1.8.1.tar
-        - name: "istio/pilot:1.8.1"
-          file_name: pilot-1.8.1.tar
-        - name: "istio/operator:1.8.1"
-          file_name: operator-1.8.1.tar
         # postgres
         - name: bitnami/pgpool:4.2.4
           file_name: pgpool-4.2.4.tar

schema/common/validation/configuration/applications.yml

@@ -324,12 +324,3 @@ properties:
               type: array
               items:
               - type: string
-            istio:
-              type: string
-        istio_spec:
-          type: object
-          properties:
-            profile:
-              type: string
-            name:
-              type: string