Enabling policy in a custom environment

[theganyo]

This may be pretty esoteric, but I have an Istio environment for which I want to enable policy checks. The official documentation says:

“Execute the following command from the root Istio directory”: istioctl manifest apply --set values.global.disablePolicyChecks=false

But unfortunately, this is a custom environment and I don’t have an Istio install directory. Is there another way to apply this config change to the running Istio environment without having Istio config files?

Thanks!

[mudit_singh]

You can generate a manifest for your current istio installation and make “disablePolicyChecks=false” in that and apply that manifest. I believe that should do the trick.

[Juraj]

@theganyo

fortunately, this is a custom environment and I don’t have an Istio install directory. Is there another way to apply this config change to the running Istio environment without having Istio config files?

Thanks!

You can change “Istio” ConfigMap:
$ kubectl edit configmap istio -n istio-system

data:
mesh:
disablePolicyChecks: false