forked from docs/doc-exports
qiujiandong1
719033eb05
Reviewed-by: Eotvos, Oliver <oliver.eotvos@t-systems.com> Co-authored-by: qiujiandong1 <qiujiandong1@huawei.com> Co-committed-by: qiujiandong1 <qiujiandong1@huawei.com>
40 lines
4.6 KiB
HTML
40 lines
4.6 KiB
HTML
<a name="asm_faq_0036"></a><a name="asm_faq_0036"></a>
|
|
|
|
<h1 class="topictitle1">How Do I Enable Namespace Injection for a Cluster?</h1>
|
|
<div id="body0000001245190541"><p id="asm_faq_0036__p146320254498">When injecting a sidecar to the namespace of a cluster, if the namespace injection is not enabled in the cluster, perform the following steps:</p>
|
|
<ol id="asm_faq_0036__ol2079325918413"><li id="asm_faq_0036__li12319652815"><span>Connect to the cluster using kubectl.</span></li><li id="asm_faq_0036__li1935617285"><span>Run the <strong id="asm_faq_0036__b11537110122113">kubectl get iop -nistio-system</strong> command to query iop resources.</span><p><ul id="asm_faq_0036__ul20338153273715"><li id="asm_faq_0036__li833812326375">If the following information is displayed, the iop resource exists. Go to <a href="#asm_faq_0036__li202171822811">3</a>.<p id="asm_faq_0036__p1067550173913"><span><img id="asm_faq_0036__image201895242711" src="en-us_image_0000001270399104.png"></span></p>
|
|
</li><li id="asm_faq_0036__li166475404394">If the following information is displayed, no iop resources exist. Go to <a href="#asm_faq_0036__li797012579155">4</a>.<p id="asm_faq_0036__p913153415493"><span><img id="asm_faq_0036__image17131134204919" src="en-us_image_0000001321081541.png"></span></p>
|
|
</li></ul>
|
|
</p></li><li id="asm_faq_0036__li202171822811"><a name="asm_faq_0036__li202171822811"></a><a name="li202171822811"></a><span>Run the <strong id="asm_faq_0036__b179095042114">kubectl edit iop -nistio-system</strong> <em id="asm_faq_0036__i8796145022119">data-plane</em> command to modify the <strong id="asm_faq_0036__b19796175017214">autoInject</strong> configuration item. In the preceding command, <em id="asm_faq_0036__i625973465316">data-plane</em> indicates the name of the iop resource queried in the previous step. Replace it with the actual value.</span><p><pre class="screen" id="asm_faq_0036__screen221418122816"> global:
|
|
defaultPodDisruptionBudget:
|
|
enabled: true
|
|
hub: *.*.*.*:20202/asm
|
|
logging:
|
|
level: default:info
|
|
meshID: test-payment
|
|
multiCluster:
|
|
clusterName: test-yy
|
|
network: test-yy-network
|
|
proxy:
|
|
<strong id="asm_faq_0036__b1321171816284">autoInject: enabled</strong>
|
|
remotePilotAddress: *.*.*.*
|
|
tag: 1.8.6-r1-20220512225026</pre>
|
|
<div class="caution" id="asm_faq_0036__note64454489259"><span class="cautiontitle"><img src="public_sys-resources/caution_3.0-en-us.png"> </span><div class="cautionbody"><p id="asm_faq_0036__asm_faq_0042_p1942555041213">Perform the following operations only in Istio 1.18.7-r4 or later.</p>
|
|
<p id="asm_faq_0036__asm_faq_0042_p12491217172313">After running the <strong id="asm_faq_0036__asm_faq_0042_b1167713144507">kubectl edit iop</strong> command to edit the parameter to be modified, change the value of <strong id="asm_faq_0036__asm_faq_0042_b856252085018">install.istio.io/ignoreReconcile</strong> to <strong id="asm_faq_0036__asm_faq_0042_b94161923105014">false</strong>, save the modification, and exit.</p>
|
|
<p id="asm_faq_0036__asm_faq_0042_p1149117176234"><span><img id="asm_faq_0036__asm_faq_0042_image124911717192310" src="en-us_image_0000002241895141.png"></span></p>
|
|
<p id="asm_faq_0036__asm_faq_0042_p9491121722317">Run the <strong id="asm_faq_0036__asm_faq_0042_b472114279502">kubectl get iop -n istio-system</strong> command to check the IOP status. Wait until the value of <strong id="asm_faq_0036__asm_faq_0042_b538783419506">STATUS</strong> changes to <strong id="asm_faq_0036__asm_faq_0042_b1852693715505">HEALTHY</strong>.</p>
|
|
<p id="asm_faq_0036__asm_faq_0042_p11491121712231"><span><img id="asm_faq_0036__asm_faq_0042_image14491111762316" src="en-us_image_0000002242015001.png"></span></p>
|
|
<p id="asm_faq_0036__asm_faq_0042_p1849131762315">Change the value of <strong id="asm_faq_0036__asm_faq_0042_b9531143444915">install.istio.io/ignoreReconcile</strong> to <strong id="asm_faq_0036__asm_faq_0042_b1862817376491">true</strong>.</p>
|
|
</div></div>
|
|
</p></li><li id="asm_faq_0036__li797012579155"><a name="asm_faq_0036__li797012579155"></a><a name="li797012579155"></a><span>Run the <strong id="asm_faq_0036__b1190414902214">kubectl edit cm -nistio-system istio-sidecar-injector</strong> command to modify the <strong id="asm_faq_0036__b4911109202215">istio-sidecar-injector</strong> configuration item.</span><p><pre class="screen" id="asm_faq_0036__screen1219885482913">data:
|
|
config: |-
|
|
<strong id="asm_faq_0036__b18198165413294">policy: enabled</strong></pre>
|
|
</p></li></ol>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="asm_faq_0019.html">Mesh Management</a></div>
|
|
</div>
|
|
</div>
|
|
|