WIP

On-behalf-of: @SAP angel.kafazov@sap.com
Signed-off-by: Angel Kafazov <akafazov@cst-bg.net>

local-setup/kustomize/base/istio-operator/istio.yaml

@@ -0,0 +1,12 @@
+---
+apiVersion: install.istio.io/v1alpha1
+kind: IstioOperator
+metadata:
+  name: istio-operator
+  namespace: istio-system
+spec:
+  components:
+    cni:
+      namespace: istio-system
+      enabled: true
+---

local-setup/kustomize/base/istio/istio.yaml

@@ -86,12 +86,24 @@ spec:
           - name: status-port
             port: 15021
             nodePort: 32000
+
 ---
-apiVersion: install.istio.io/v1alpha1
-kind: IstioOperator
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: istio-cni
+  namespace: istio-system
 spec:
-  components:
-    cni:
+  interval: 5m
+  chart:
+    spec:
+      chart: cni
+      version: 1.24.2
+      sourceRef:
+        kind: HelmRepository
+        name: istio
+  releaseName: istio-cni
+  dependsOn:
+    - name: istio-base
       namespace: istio-system
-      enabled: true
----
+

local-setup/scripts/start.sh

@@ -53,6 +53,9 @@ helm upgrade -i -n flux-system --create-namespace flux oci://ghcr.io/fluxcd-comm
 echo -e "${COL}[$(date '+%H:%M:%S')] Starting deployments ${COL_RES}"
 kubectl apply -k $SCRIPT_DIR/../kustomize/overlays/default
 
+sleep 5
+kubectl apply -f $SCRIPT_DIR/../kustomize/base/istio-operator
+
 echo -e "${COL}[$(date '+%H:%M:%S')] Creating necessary secrets ${COL_RES}"
 kubectl create secret docker-registry ghcr-credentials -n openmfp-system --docker-server=ghcr.io --docker-username=$ghUser --docker-password=$ghToken --dry-run=client -o yaml | kubectl apply -f -