bin/migrate.sh

@@ -1,3 +1,3 @@
 #kubectl get all,cm,secret,ing,role,clusterrole,rolebindings,clusterrolebindings -l app.kubernetes.io/managed-by=Helm -l app.kubernetes.io/instance=cert-manager -A --no-headers --output  custom-columns="POD-NAME":.kind,"NAMESPACE":.metadata.name | while read -r var1 var2; do kubectl annotate $var1 $var2 "meta.helm.sh/release-namespace"="cert-manager" "meta.helm.sh/release-name"="cert-manager" --overwrite; done
 
-kubectl get ValidatingWebhookConfiguration,all,cm,secret,ing,role,clusterrole,rolebindings,clusterrolebindings,MutatingWebhookConfiguration -l app.kubernetes.io/managed-by=Helm -l app.kubernetes.io/instance=cert-manager -A --no-headers --output  custom-columns="POD-NAME":.kind,"NAMESPACE":.metadata.name,"ns":.metadata.namespace | while read -r var1 var2 var3; do kubectl annotate $var1 $var2 -n $var3 "meta.helm.sh/release-namespace"="cert-manager" "meta.helm.sh/release-name"="cert-manager"; done
+kubectl get sa,ValidatingWebhookConfiguration,all,cm,secret,ing,role,clusterrole,rolebindings,clusterrolebindings,MutatingWebhookConfiguration -l argocd.argoproj.io/instance=istio-base -A --no-headers --output  custom-columns="POD-NAME":.kind,"NAMESPACE":.metadata.name,"ns":.metadata.namespace | while read -r var1 var2 var3; do kubectl annotate $var1 $var2 -n $var3 "meta.helm.sh/release-namespace"="istio-system" "meta.helm.sh/release-name"="istio-base" && kubectl label $var1 $var2 -n $var3 app.kubernetes.io/managed-by=Helm; done

helmfile.yaml

@@ -11,6 +11,11 @@ releases:
     namespace: kube-system
     createNamespace: false
 
+  - <<: *istio-base
+    installed: true
+    namespace: istio-system
+    createNamespace: false
+  
   - <<: *cert-manager 
     installed: true
     namespace: cert-manager

releases.yaml

@@ -34,6 +34,14 @@ templates:
     name: cert-manager
     chart: jetstack/cert-manager
     version: 1.10.1
+    set: 
+      - name: installCRDs
+        value: true
+
+  istio-base: &istio-base
+    name: istio-base
+    chart: istio/base
+    version: 1.16.1
     inherit: 
       - template: crd-management-hook
 

repositories.yaml

@@ -6,4 +6,5 @@ repositories:
     url: https://allanger.github.io/allanger-charts
   - name: jetstack
     url: https://charts.jetstack.io
-
+  - name: istio
+    url: https://istio-release.storage.googleapis.com/charts