Can Istio only be installed on a cluster-level or is it possible to isolate Istio to a single project / namespace?
Regards
Anders
I think that installing the custom resource definitions requires some elevated priviledges; CRDs are not namespace-scoped. (Correct me if I am wrong, please).
Also, currently many of the Istio components must be run as root, which is another multi-tenancy-unfriendly limitation.
It’s possible to run several Istio meshes in one Kubernetes cluster, though, by installing it multiple times to different namespaces.
1 Like