Additional Steps for Installing Istio on RKE2 and K3s Clusters

When installing or upgrading the Istio Helm chart through Apps,

  1. If you are installing the chart, click Customize Helm options before install and click Next.
  2. You will see options for configuring the Istio Helm chart. On the Components tab, check the box next to Enabled CNI.
  3. Add a custom overlay file specifying cniBinDir and cniConfDir. For more information on these options, refer to the Istio documentation. An example is below:
  • RKE2
  • K3s
  1. apiVersion: install.istio.io/v1alpha1
  2. kind: IstioOperator
  3. spec:
  4.   components:
  5.     cni:
  6.       enabled: true
  7.       k8s:
  8.         overlays:
  9.         - apiVersion: "apps/v1"
  10.           kind: "DaemonSet"
  11.           name: "istio-cni-node"
  12.           patches:
  13.           - path: spec.template.spec.containers.[name:install-cni].securityContext.privileged
  14.             value: true
  15.   values:
  16.     cni:
  17.       cniBinDir: /opt/cni/bin
  18.       cniConfDir: /etc/cni/net.d
  1. apiVersion: install.istio.io/v1alpha1
  2. kind: IstioOperator
  3. spec:
  4.   components:
  5.     cni:
  6.       enabled: true
  7.       k8s:
  8.         overlays:
  9.         - apiVersion: "apps/v1"
  10.           kind: "DaemonSet"
  11.           name: "istio-cni-node"
  12.           patches:
  13.           - path: spec.template.spec.containers.[name:install-cni].securityContext.privileged
  14.             value: true
  15.   values:
  16.     cni:
  17.       cniBinDir: /var/lib/rancher/k3s/data/current/bin
  18.       cniConfDir: /var/lib/rancher/k3s/agent/etc/cni/net.d

Result: Now you should be able to utilize Istio as desired, including sidecar injection and monitoring via Kiali.