Helm chart to onboard a set of authorization-based isolated namespaces to Knative when using Istio

Usage

Prerequisite

• Follow setup OpenShift Serverless with Service Mesh.
• Follow use Service Mesh to isolate network traffic with OpenShift Serverless.

Onboarding a set of namespaces

Imaging we want to onboard a new tenant named tenant-1 to Knative composed of two namespaces: ns1 and ns2.

1. Create the project's namespaces by running the following commands:

   kubectl create ns ns1
   kubectl create ns ns2

2. Install the Helm chart

   helm install oci://quay.io/openshift-knative/knative-istio-authz --version 1.31.0 --set "name=tenant-1" --set "namespaces={ns1, ns2}"

   or, view the resources you would need to onboard the project:

   helm template oci://quay.io/openshift-knative/knative-istio-authz --version 1.31.0 --set "name=tenant-1" --set "namespaces={ns1, ns2}"

Development

Render the templates by running the following command:

helm template ./ --values tests/values.yaml

Package the chart by running the following command:

helm package ./

Push the chart to your own account by running the following command:

helm push knative-istio-authz-0.1.0.tgz oci://quay.io/<your-username>

The chart is automatically pushed to quay.io/openshift-knative on main and release-* branches using CI.