Chapter 4. Updating the Istio CNI

Procedure

1. Change the version in the Istio resource. For example, to update to Istio 1.28.5, set the spec.version field to 1.28.5 by running the following command:

   $ oc patch istiocni default -n istio-cni --type='merge' -p '{"spec":{"version":"v1.28.5"}}'

2. Wait for the IstioCNI DaemonSet to reach the Ready status after the update by running the following command:

   $ oc wait --for=condition=Ready istiocnis/default --timeout=5m

3. Confirm that the new version of the CNI plugin is ready by running the following command:

   $ oc get istiocni default

   You should see an output similar to the following example:

   NAME      READY   STATUS    VERSION   AGE
   default   True    Healthy   v{istio-latest}   7d1h

4. Check the status of the pods by running the following command:

   $ oc get pods -n istio-cni

   You should see an output similar to the following example:

   NAME                   READY   STATUS    RESTARTS   AGE
   istio-cni-node-abc12   1/1     Running   0          3m
   istio-cni-node-def34   1/1     Running   0          3m
   istio-cni-node-ghi56   1/1     Running   0          3m

   Note

   When you use the RevisionBased strategy, the Istio CNI component remains compatible with many control plane versions. It continues to manage traffic redirection for both the old and the new control planes throughout the migration. The Istio CNI is compatible with a control plane running the same minor version or one minor version higher.