How Do I Disable Sidecar Injection for Workloads?

If sidecar injection is enabled for a namespace of a cluster, sidecars are automatically injected for the pods of all workloads in the namespace. To prevent sidecars from being injected for some workloads, perform the following operations:

1. Log in to the CCE console and click the cluster name to go to the cluster console. In the navigation pane, choose Workloads. Then, click the Deployments tab.
2. Locate the workload and click Edit YAML in the Operation column.
3. Locate the target field based on the service mesh version and add sidecar.istio.io/inject: 'false'.
   • For service meshes earlier than 1.13
     Locate the spec.template.metadata.annotations field and add sidecar.istio.io/inject: 'false'.

           annotations:
             sidecar.istio.io/inject: 'false'

     

   • For service meshes 1.13 or later:

     Locate the spec.template.metadata.label field and add sidecar.istio.io/inject: 'false'.

           label:
             sidecar.istio.io/inject: 'false'

     

   For more details about sidecar injection, see Automatic Sidecar Injection.