Skip to content

Commit 2039844

Browse files
authored
Support for network changes starting with Istio v1.10 and greater (#2538)
* Support for network changes starting with Istio v1.10 and greater
1 parent e0ee136 commit 2039844

File tree

4 files changed

+530
-19
lines changed

4 files changed

+530
-19
lines changed

documentation/staging/content/userguide/istio/istio.md

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -142,6 +142,38 @@ If the WebLogic administration port is enabled on the Administration Server:
142142
Additionally, when Istio support is enabled for a domain, the operator
143143
ensures that the Istio sidecar is not injected into the introspector job's pods.
144144

145+
#### Support for network changes in Istio v1.10 and later
146+
147+
Starting with Istio 1.10, the networking behavior was changed in that the proxy no longer redirects
148+
the traffic to the localhost interface, but instead forwards it to the network interface associated
149+
with the pod's IP.
150+
151+
To learn more about changes to Istio networking beginning with Istio 1.10, see [Upcoming networking changes in Istio 1.10](https://istio.io/latest/blog/2021/upcoming-networking-changes/).
152+
153+
In order to support Istio v1.10 and later, as well as previous releases, the
154+
operator will:
155+
156+
* Add an additional WebLogic HTTP protocol network channel for the readiness probe that is bound to the localhost network interface.
157+
* Add additional WebLogic network channels, bound to the localhost network interface, for each defined custom network channel.
158+
* Continue to automatically add the network channels described above in [How Istio-enabled domains differ from regular domains](#how-istio-enabled-domains-differ-from-regular-domains)
159+
160+
When adding additional WebLogic network channels for the readiness probe and any defined custom channels,
161+
the name of the additional channel will be appended with '-lhNN', where NN represents
162+
a two digit value for uniqueness.
163+
164+
For example, the additional WebLogic HTTP protocol network channel for the readiness probe would be
165+
defined as follows:
166+
167+
|Name|Port|Listening address|Protocol|Exposed as a container port|
168+
|----|----|----|--------|-----|
169+
|`http-probe-lh01`|From configuration Istio `readinessPort` | `127.0.0.1` | `http`| No |
170+
171+
As another example, for a custom WebLogic network channel defined as `T3Channel` with port `5556`
172+
and protocol `t3`, the additional channel would be defined as follows:
173+
174+
|Name|Port|Listening address|Protocol|Exposed as a container port|
175+
|----|----|----|--------|-----|
176+
|`T3Channel-lh01`| `5556` | `127.0.0.1` | `t3`| Yes |
145177

146178
### Apply the Domain YAML file
147179

0 commit comments

Comments
 (0)