Istio CNI by default

[juliusvonkohout]

Validation Checklist

• I confirm that this is a Kubeflow-related issue.
• I am reporting this in the appropriate repository.
• I have followed the Kubeflow installation guidelines.
• The issue report is detailed and includes version numbers where applicable.
• This issue pertains to Kubeflow development.
• I am available to work on this issue.
• You can join the CNCF Slack and access our meetings at the Kubeflow Community website. Our channel on the CNCF Slack is here #kubeflow-platform.

Version

master

Detailed Description

Istio CNI by default

Steps to Reproduce

Istio CNI by default

Screenshots or Videos (Optional)

No response

[juliusvonkohout]

After fixing the linked issues I just need to switch all workflows from tests/gh-actions/install_istio.sh to tests/gh-actions/install_istio-cni.sh. Then check whether there are problems on common clusters.

[juliusvonkohout]

Part of rootless kubeflow #2528 and follow up of #2907 and many other PRs.

[juliusvonkohout]

#3062 is just the first part.

[juliusvonkohout]

Check the GCP hostpath permissions
"/home/kubernetes/bin" in addition to the default "/opt/cni/bin"

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: istio-cni-node
  namespace: kube-system
spec:
  template:
    spec:
      volumes:
      - hostPath:
          path: /home/kubernetes/bin
        name: cni-bin-dir