Skip to content

Commit

Permalink
updating rancher-istio app-readme.md
Browse files Browse the repository at this point in the history
Warning user about change on defaul authentication strategy for kiali
  • Loading branch information
nicholasSUSE committed Oct 5, 2023
1 parent 0fad9f0 commit bde31ab
Show file tree
Hide file tree
Showing 4 changed files with 18 additions and 8 deletions.
Binary file modified assets/rancher-istio/rancher-istio-103.2.0+up1.19.0.tgz
Binary file not shown.
11 changes: 8 additions & 3 deletions charts/rancher-istio/103.2.0+up1.19.0/app-readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,14 @@ Our [Istio](https://istio.io/) installer wraps the istioctl binary commands in a

For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/istio/v2.5/).

---

# Warnings

* #### The default `authentication strategy` for `Kiali` has changed from anonymous to token at version `103.2.0+up1.19.0`. You can always edit it in the Helm values Yaml file Kiali.auth.strategy while installing or upgrading the chart.
More information on: [Kiali Authentication Docs](https://kiali.io/docs/configuration/authentication/)
* Upgrading across more than two minor versions (e.g., 1.6.x to 1.9.x) in one step is not officially tested or recommended. See [Istio upgrade docs](https://istio.io/latest/docs/setup/upgrade/) for more details.

## Upgrading to Kubernetes v1.25+

Starting in Kubernetes v1.25, [Pod Security Policies](https://kubernetes.io/docs/concepts/security/pod-security-policy/) have been removed from the Kubernetes API.
Expand All @@ -24,9 +32,6 @@ Upon setting `global.cattle.psp.enabled` to false, the chart will remove any PSP

As a replacement for PSPs, [Pod Security Admission](https://kubernetes.io/docs/concepts/security/pod-security-admission/) should be used. Please consult the Rancher docs for more details on how to configure your chart release namespaces to work with the new Pod Security Admission and apply Pod Security Standards.

## Warnings
- Upgrading across more than two minor versions (e.g., 1.6.x to 1.9.x) in one step is not officially tested or recommended. See [Istio upgrade docs](https://istio.io/latest/docs/setup/upgrade/) for more details.

## Known Issues

#### Airgapped Environments
Expand Down
4 changes: 2 additions & 2 deletions index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9806,7 +9806,7 @@ entries:
catalog.cattle.io/upstream-version: 1.19.0
apiVersion: v1
appVersion: 1.19.0
created: "2023-10-03T19:32:15.4086653-03:00"
created: "2023-10-05T17:45:48.508994781-03:00"
dependencies:
- condition: kiali.enabled
name: kiali
Expand All @@ -9816,7 +9816,7 @@ entries:
repository: file://./charts/tracing
description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/
for details.
digest: d21c802ffcbb4476f8ff6e60f2bd859b86fa119480cd0a8a1ffbeedf6a9d0f96
digest: 071e9f607c37f435db9c82245219ad4f69635fbf8ed2348db15a91e8db0cf068
icon: https://charts.rancher.io/assets/logos/istio.svg
keywords:
- networking
Expand Down
11 changes: 8 additions & 3 deletions packages/rancher-istio/1.19/rancher-istio/charts/app-readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,14 @@ Our [Istio](https://istio.io/) installer wraps the istioctl binary commands in a

For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/istio/v2.5/).

---

# Warnings

* #### The default `authentication strategy` for `Kiali` has changed from anonymous to token at version `103.2.0+up1.19.0`. You can always edit it in the Helm values Yaml file Kiali.auth.strategy while installing or upgrading the chart.
More information on: [Kiali Authentication Docs](https://kiali.io/docs/configuration/authentication/)
* Upgrading across more than two minor versions (e.g., 1.6.x to 1.9.x) in one step is not officially tested or recommended. See [Istio upgrade docs](https://istio.io/latest/docs/setup/upgrade/) for more details.

## Upgrading to Kubernetes v1.25+

Starting in Kubernetes v1.25, [Pod Security Policies](https://kubernetes.io/docs/concepts/security/pod-security-policy/) have been removed from the Kubernetes API.
Expand All @@ -24,9 +32,6 @@ Upon setting `global.cattle.psp.enabled` to false, the chart will remove any PSP

As a replacement for PSPs, [Pod Security Admission](https://kubernetes.io/docs/concepts/security/pod-security-admission/) should be used. Please consult the Rancher docs for more details on how to configure your chart release namespaces to work with the new Pod Security Admission and apply Pod Security Standards.

## Warnings
- Upgrading across more than two minor versions (e.g., 1.6.x to 1.9.x) in one step is not officially tested or recommended. See [Istio upgrade docs](https://istio.io/latest/docs/setup/upgrade/) for more details.

## Known Issues

#### Airgapped Environments
Expand Down

0 comments on commit bde31ab

Please sign in to comment.