Set policy to false in istio-sidecar-injector configmap

1

Hi,

Could you tell me how to disable the policy in the istio-sidecar-injector config map:

$ kubectl get configmap istio-sidecar-injector -o yaml | head -4
apiVersion: v1
data:
  config: |-
    policy: enabled

In pre 1.6, it was possible by setting spec.values.global.autoInject: disabled in the IstioOperator custom resource.

2

OK, I was able to sort it out. In 1.6 it is possible to set it this way: spec.values.global.proxy.autoInject: disabled.

However, it’s not documented anywhere… Could you update the documentation?

3

@k_pawel

How can I use this in IstioControlPlane,? I tired the following, and got an error while running helm installation

apiVersion: install.istio.io/v1alpha2
kind: IstioControlPlane
spec:

  values:
    prometheus:
      enabled: false
  global:
    autoInject:
      enabled: false`

Any idea? Appreciate your help.

4

@k_pawel

Never mind, I got it. It should be like the following:

apiVersion: install.istio.io/v1alpha2
kind: IstioControlPlane
spec:

  values:
    prometheus:
      enabled: false
  global:
    proxy:
      autoInject: disabled

Sorry about that.