Sidecar autoinjection

Contributors Operator
1

How to enable sidecar injection using IstioOperator? This is my config and it is not enough for that.

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
  name: control-plane-1-9-4
  namespace: istio-system
spec:
  components:
    base:
      enabled: true
    pilot:
      enabled: true
  profile: default
  revision: 1-9-4
  values:
    global:
      proxy:
        autoInject: enabled
2

You need to set on each namespace the label “istio-injection=enabled” in order for the Operator to know to inject the Envoy sidecars on to your pods

Automatic Sidecar Injection

3

I have done that. Running out of ideas what to try else.

apiVersion: v1
kind: Namespace
metadata:
  creationTimestamp: "2021-05-06T13:36:27Z"
  labels:
    istio-injection: enabled
  name: default
  resourceVersion: "1199221"
  selfLink: /api/v1/namespaces/default
  uid: 216b5435-5dd0-4645-9703-0a89a7f92254
spec:
  finalizers:
  - kubernetes
status:
  phase: Active
4

If Istio is installed using: istioctl operator init --revision 1-9-4
then NS label should be: istio.io/rev: 1-9-4
Created an issue for that: Istio-operator sidecar injection issues · Issue #32746 · istio/istio · GitHub
I guess it is not documented yet.