Set Ingress Gateway NodePort with Isito Operator

Question

I am working to configure Istio in my on prem Kubernetes cluster. As part of this I have to coordinate with my System Admins to setup DNS and load balancer resources.

I have found with my work learing and setting up Istio, that I need to fully uninstall it and re-install it. When I do that Istio will pick a new port for the Ingress Gateway. This then necessitates me coordinating updates with the System Admins.

It would be convenient if I could force Istio to just keep using the same port.

I am using the Istio Operator to manage Istio. Is there a way to set an Ingress Gateway's NodePort with the Istio Operator?

Answer 1

In your Istio operator yaml you can define/override ingressgateway settings (k8s section of an ingressgateway definition)

https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#KubernetesResourcesSpec

for example :

components: 
    ingressGateways:
      - name: istio-ingressgateway
        enabled: true
        k8s:
          service:
            ports:
              - name: status-port
                port: 15021
              - name: tls-istiod
                port: 15012
              - name: tls
                port: 15443
                nodePort: 31371
              - name: http2
                port: 80
                nodePort: 31381
                targetPort: 8280
              - name: https
                port: 443
                nodePort: 31391
                targetPort: 8243