IPVLAN interface is not being created while sidecar is injected about istio HOT 4 CLOSED

Hi @gnu300, thanks for reporting the bug.

Any chance you can file an issue in our Jira (https://issues.redhat.com/projects/MAISTRA). If not, I'll do it.

We have become aware of this issue a week ago. It is caused by the sidecar injector, as it has to set the k8s.v1.cni.cncf.io/networks annotation to enable the istio-cni CNI plugin. But when it does this, it overrides the existing value of that annotation. We'll need to figure out a way of adding an additional entry into the existing annotation, but it's not as straightforward as it might seem, because you now need to figure out what's the correct order.

As a workaround, you can modify the istio-sidecar-injector configmap in the istio-system namespace (or wherever you've installed the control plane). Look for the injectedAnnotations field inside the config entry of the configmap. Of course, this workaround is only applicable if you want all your pods with the Istio sidecar to have the ipvlan-net plugin enabled.

from istio.

Actually, no need to create the issue in Jira, as we already have it: https://issues.redhat.com/browse/MAISTRA-1374

from istio.

Awesome, thank you for your quick response! I actually did already create an Jira issue, https://issues.redhat.com/projects/MAISTRA/issues/MAISTRA-1432 . I'll close it as duplicate and refer to https://issues.redhat.com/browse/MAISTRA-1374 .
I'll try your workaround in the next hours and give you feedback!

from istio.

Excellent! Let's move the discussion to Jira. Closing this here.

from istio.