Comments (7)
I got it down to 463kb
by applying that in the Cargo.yaml:
[profile.release]
lto = true
from oidc-filter.
ConfigMap should help,but for files <1Mb
https://discuss.istio.io/t/istio-1-7-fails-to-create-a-wasm-filter/8208/10
kubectl create cm -n default example-filter --from-file=path/to/oidc-filter.wasm
Pod annotations to mount this configmap
sidecar.istio.io/userVolume: '[{"name":"wasmfilters-dir","configMap": {"name": "example-filter"}}]'
sidecar.istio.io/userVolumeMount: '[{"mountPath":"/var/local/lib/wasm-filters","name":"wasmfilters-dir"}]'
from oidc-filter.
Yup, ConfigMaps are not sufficient for this filter, it's 1.7mb on my machine
from oidc-filter.
I guess another option would be to declare a custom istio sidecar image in the operator profile.
from oidc-filter.
I guess another option would be to declare a custom istio sidecar image in the operator profile.
Right, that's always an option if you can get that past your local IT/platform team ;). We're working on a packaging format upstream that should solve this, it's probably going to be a container image
from oidc-filter.
if you do something upstream, maybe supporting compression might be good from the start 😃
41778348 960 -rwxr-xr-x 2 marcbachmann staff 478K Feb 12 00:15 target/wasm32-unknown-unknown/release/oidc_filter.wasm
41984183 384 -rw-r--r-- 1 marcbachmann staff 129K Feb 13 04:50 target/wasm32-unknown-unknown/release/oidc_filter.wasm.br
41782465 328 -rw-r--r-- 1 marcbachmann staff 163K Feb 12 00:18 target/wasm32-unknown-unknown/release/oidc_filter.wasm.gz
from oidc-filter.
Closing this as we're now producing a container image which can be used in Istio and OpenShift Service Mesh
from oidc-filter.
Related Issues (12)
- tls ingress readiness HOT 3
- Support for Okta IdP (at least state parameter missing to proceed testing)
- Set up workflows to build and release the WASM file to a downloadable URL
- What is the proper way to make istio-proxy filesystem non readonly to copy wasm filter HOT 1
- Access stuck in RBAC access denied
- is there any way to pass the client secret from a kubernetes secret ?
- internal error after login
- RBAC: access denied with istio 1.7 HOT 6
- how is the access token handled in the oidc-filter? HOT 2
- Add unit tests
- Add integration tests
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from oidc-filter.