yexinru/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
Files
cbb24dc9f6082262007f48077857abd6518b1b1b
doc-exports/docs/asm/umn/asm_faq_0036.html
qiujiandong1 719033eb05 ASM UMN update 20250506 version 
Reviewed-by: Eotvos, Oliver <oliver.eotvos@t-systems.com>
Co-authored-by: qiujiandong1 <qiujiandong1@huawei.com>
Co-committed-by: qiujiandong1 <qiujiandong1@huawei.com>
2025-07-14 13:38:34 +00:00

4.6 KiB
Raw Blame History

How Do I Enable Namespace Injection for a Cluster?

When injecting a sidecar to the namespace of a cluster, if the namespace injection is not enabled in the cluster, perform the following steps:

  1. Connect to the cluster using kubectl.
  2. Run the kubectl get iop -nistio-system command to query iop resources.

    • If the following information is displayed, the iop resource exists. Go to 3.

    • If the following information is displayed, no iop resources exist. Go to 4.

  3. Run the kubectl edit iop -nistio-system data-plane command to modify the autoInject configuration item. In the preceding command, data-plane indicates the name of the iop resource queried in the previous step. Replace it with the actual value.

        global:
      defaultPodDisruptionBudget:
        enabled: true
      hub: *.*.*.*:20202/asm
      logging:
        level: default:info
      meshID: test-payment
      multiCluster:
        clusterName: test-yy
      network: test-yy-network
      proxy:
        autoInject: enabled
      remotePilotAddress: *.*.*.*
      tag: 1.8.6-r1-20220512225026

    Perform the following operations only in Istio 1.18.7-r4 or later.

    After running the kubectl edit iop command to edit the parameter to be modified, change the value of install.istio.io/ignoreReconcile to false, save the modification, and exit.

    Run the kubectl get iop -n istio-system command to check the IOP status. Wait until the value of STATUS changes to HEALTHY.

    Change the value of install.istio.io/ignoreReconcile to true.

  4. Run the kubectl edit cm -nistio-system istio-sidecar-injector command to modify the istio-sidecar-injector configuration item.

    data:
  config: |-
    policy: enabled

Parent topic: Mesh Management