{"id":16827064,"url":"https://github.com/retocode/knative-multi-istio","last_synced_at":"2026-02-08T01:33:37.422Z","repository":{"id":154107284,"uuid":"611269240","full_name":"ReToCode/knative-multi-istio","owner":"ReToCode","description":null,"archived":false,"fork":false,"pushed_at":"2023-03-21T06:23:25.000Z","size":68,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-07-21T22:02:36.517Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ReToCode.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-03-08T13:32:14.000Z","updated_at":"2023-03-08T13:32:14.000Z","dependencies_parsed_at":null,"dependency_job_id":"c7710da9-86e3-4bd0-b752-5b4dfa62a061","html_url":"https://github.com/ReToCode/knative-multi-istio","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/ReToCode/knative-multi-istio","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ReToCode%2Fknative-multi-istio","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ReToCode%2Fknative-multi-istio/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ReToCode%2Fknative-multi-istio/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ReToCode%2Fknative-multi-istio/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ReToCode","download_url":"https://codeload.github.com/ReToCode/knative-multi-istio/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ReToCode%2Fknative-multi-istio/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29216086,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-08T00:10:47.190Z","status":"ssl_error","status_checked_at":"2026-02-08T00:10:43.589Z","response_time":63,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-13T11:19:31.790Z","updated_at":"2026-02-08T01:33:37.408Z","avatar_url":"https://github.com/ReToCode.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Knative on a multi-istio cluster\nThis repository contains findings around installing `Knative` on a cluster where multiple `istio control planes` are present.\n\n## Prerequisites\n* An OpenShift cluster\n\n## Conditions / boundaries\n* `Serverless` can only target ONE istio service mesh. Multiple meshes can be present in the cluster, but `Serverless` will only be available on one of them.\n* The mesh that `Serverless` is part of has to be distinct and only for `Serverless` workloads, as additional configuration like gateways might interfere with the automated mesh configuration by `Serverless`.\n* `Istio` only allows one gateway to claim a wildcard host binding (`hosts: *`) on the same port (`port: 443`). So either the `knative-ingress-gateway` and `knative-local-gateway` have to be unique or `Serverless` does require its own `istio-ingressgateway`.\n* Cluster external serverless-services are expected to be called via `OpenShift ingress` using `OpenShift Routes`.\n* Migration/Changes of the SMMR are not supported. The only way to change the Service Mesh is to uninstall and reinstall OpenShift Serverless.\n\n\n## Reference setup\n```bash\n# Install Operators\noc apply -f 0-prerequisites\n\n# Install single-mesh setup\noc apply -f 1-single-istio\n\n# Install a ksvc and test it\noc apply -f service\n\ncurl -k https://svc-always-scaled-demo.apps.rlehmann-ocp-4-12.serverless.devcluster.openshift.com/\nHello Serverless!\n```\n\n## Multi-istio setup\n```bash\n# Install Operators\noc apply -f 0-prerequisites\n\n# Install single-mesh setup\noc apply -f 1-single-istio\n\n# Remove the knative-local-gateway in istio-system\noc delete -f 1-single-istio/knative-local-gateway-service.yaml\n\n# Remove the ksvc, to be recreated in the new mesh\noc delete -f service\n\n# Install the second mesh\noc apply -f 2-multi-istio/smmr-istio-system.yaml\noc apply -f 2-multi-istio\n\n# Install a ksvc and test it\noc apply -f service\n\ncurl -k https://svc-always-scaled-demo.apps.rlehmann-ocp-4-12.serverless.devcluster.openshift.com/\nHello Serverless!\n```\n\n## Relevant changes\n\n**Gateway selector**\n```yaml\n# single-istio\nselector:\n  istio: ingressgateway\n# multi-istio\nselector:\n  knative: ingressgateway\n```\n\n**Knative local gateway service selector (optional)**\n```yaml\n# single-istio\nselector:\n  istio: ingressgateway\n# multi-istio\nselector:\n  knative: ingressgateway\n```\n\n**Override knative serving istio location**\n```yaml\nspec:\n  config:\n    istio:\n      gateway.knative-serving.knative-ingress-gateway: istio-ingressgateway.istio-system-reto.svc.cluster.local\n      local-gateway.knative-serving.knative-local-gateway: knative-local-gateway.istio-system-reto.svc.cluster.local\n```\n\n**SMCP add custom label to ingress-gateway**\n```yaml\napiVersion: maistra.io/v2\nkind: ServiceMeshControlPlane\nmetadata:\n  name: basic\n  namespace: istio-system-reto\nspec:\n  gateways:\n    ingress:\n      service:\n        metadata:\n          labels:\n            knative: ingressgateway\n```\n\n**Results in a diff on KIngress**\n```yaml\n# single-istio\n  privateLoadBalancer:\n    ingress:\n    - domainInternal: knative-local-gateway.istio-system.svc.cluster.local\n  publicLoadBalancer:\n    ingress:\n    - domainInternal: istio-ingressgateway.istio-system.svc.cluster.local    \n# multi-istio\n  privateLoadBalancer:\n    ingress:\n    - domainInternal: knative-local-gateway.istio-system-reto.svc.cluster.local\n  publicLoadBalancer:\n    ingress:\n    - domainInternal: istio-ingressgateway.istio-system-reto.svc.cluster.local\n```\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fretocode%2Fknative-multi-istio","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fretocode%2Fknative-multi-istio","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fretocode%2Fknative-multi-istio/lists"}