Install Istio on a single project / namespace

Can Istio only be installed on a cluster-level or is it possible to isolate Istio to a single project / namespace?


I think that installing the custom resource definitions requires some elevated priviledges; CRDs are not namespace-scoped. (Correct me if I am wrong, please).

Also, currently many of the Istio components must be run as root, which is another multi-tenancy-unfriendly limitation.

It’s possible to run several Istio meshes in one Kubernetes cluster, though, by installing it multiple times to different namespaces.

1 Like