xTag

Overview

Full name
docker.io/rancher/mirrored-istio-install-cni
Registry
docker.io
Namespace
rancher
Repository
mirrored-istio-install-cni
Cached tags
142
Last synced
07/06/2026, 06:32 PM

Introduction

Rancher 镜像化 Istio CNI 安装组件，在 K8s 节点注入 iptables 与 CNI 插件，替代 initContainer 特权模式完成 sidecar 流量劫持。

Details

mirrored-istio-install-cni 是 Istio 官方 install-cni 的 Rancher 重打包，随 Istio 控制面安装时在 each node 部署 DaemonSet，配置 Pod 网络命名空间中的 redirect 规则。属于 Kubernetes CNI 基础设施，不能作为独立 Docker 业务容器运行，也不应手写 Deployment 部署。版本必须与 istiod、proxyv2 严格对齐；升级 Istio 时需按发行说明滚动 CNI 组件。

快速启动

docker run --rm \
  docker.io/rancher/mirrored-istio-install-cni:1.22.0 \
  install-cni --help

推荐实践

# 通过 istioctl/Helm 安装，勿手工 docker run
distrib/istioctl install --set profile=default \
  --set components.cni.enabled=true
# 镜像替换为 docker.io/rancher/mirrored-istio-install-cni:<istio-version>

核心参数说明

  • 用途 — 仅作 Istio Helm/IstioOperator 的 CNI 镜像引用
  • 固定 tag — 与 istiod 同 minor 版本
  • 禁止 — 脱离 Istio 控制面单独运行
  • 权限 — 节点级 CNI 需 hostPath 与 NET_ADMIN
  • Rancher — RKE2/RKE 集群常通过内置 Istio chart 引用
  • K8s — 正确路径是 DaemonSet 而非 Deployment

Latest tags (20)

View all 142 tags →
TagArchPushed AtSizeDigestSyncWishAction
docker.io/rancher/mirrored-istio-install-cni
:1.26.2-distroless
linux/arm64linux/amd64
2025/07/15 07:3639.7 MBsha256:94d74f2eed1b…
docker.io/rancher/mirrored-istio-install-cni
:1.26.2
linux/arm64linux/amd64
2025/07/15 07:3677.5 MBsha256:efd10a73d1ac…
docker.io/rancher/mirrored-istio-install-cni
:1.25.0-distroless
linux/amd64linux/arm64
2025/03/26 07:5443.2 MBsha256:211b7d73425a…
docker.io/rancher/mirrored-istio-install-cni
:1.25.0-distroless-arm64
linux/arm64
2025/03/26 07:5438.6 MBsha256:e189caed10e6…
docker.io/rancher/mirrored-istio-install-cni
:1.25.0-distroless-amd64
linux/amd64
2025/03/26 07:5443.2 MBsha256:211b7d73425a…
docker.io/rancher/mirrored-istio-install-cni
:1.25.0
linux/amd64linux/arm64
2025/03/26 07:5496.6 MBsha256:7febb20ff390…
docker.io/rancher/mirrored-istio-install-cni
:1.25.0-arm64
linux/arm64
2025/03/26 07:5490.7 MBsha256:e5d10f5bfd29…
docker.io/rancher/mirrored-istio-install-cni
:1.25.0-amd64
linux/amd64
2025/03/26 07:5496.6 MBsha256:7febb20ff390…
docker.io/rancher/mirrored-istio-install-cni
:1.7.8-amd64
linux/amd64
2025/03/26 07:5395.8 MBsha256:df33fd17a76a…
docker.io/rancher/mirrored-istio-install-cni
:1.24.1-distroless
linux/amd64linux/arm64
2024/11/28 17:2542.3 MBsha256:29a298d30173…
docker.io/rancher/mirrored-istio-install-cni
:1.24.1-distroless-arm64
linux/arm64
2024/11/28 17:2537.8 MBsha256:460c5741ed9b…
docker.io/rancher/mirrored-istio-install-cni
:1.24.1-distroless-amd64
linux/amd64
2024/11/28 17:2542.3 MBsha256:29a298d30173…
docker.io/rancher/mirrored-istio-install-cni
:1.24.1
linux/amd64linux/arm64
2024/11/28 17:2580.6 MBsha256:bffbd80fa5da…
docker.io/rancher/mirrored-istio-install-cni
:1.24.1-arm64
linux/arm64
2024/11/28 17:2575.7 MBsha256:a64ae604d02b…
docker.io/rancher/mirrored-istio-install-cni
:1.24.1-amd64
linux/amd64
2024/11/28 17:2580.6 MBsha256:bffbd80fa5da…
docker.io/rancher/mirrored-istio-install-cni
:1.24.0-distroless
linux/arm64linux/amd64
2024/11/22 17:4437.8 MBsha256:42e53c25bf07…
docker.io/rancher/mirrored-istio-install-cni
:1.24.0-distroless-arm64
linux/arm64
2024/11/22 17:4437.8 MBsha256:42e53c25bf07…
docker.io/rancher/mirrored-istio-install-cni
:1.24.0-distroless-amd64
linux/amd64
2024/11/22 17:4442.3 MBsha256:19f4ff939128…
docker.io/rancher/mirrored-istio-install-cni
:1.24.0
linux/amd64linux/arm64
2024/11/22 17:4483.4 MBsha256:00e5f90dc39b…
docker.io/rancher/mirrored-istio-install-cni
:1.24.0-arm64
linux/arm64
2024/11/22 17:4478.2 MBsha256:23a166e557f9…