I tried installing istio with disablePolicyChecks=false but it is still showing true.
Even though in demo profile disablePolicyChecks should be false by default.
Any clue why?
I just had the same experience using istioctl manifest generate --set values.global.disablePolicyChecks=false. The generated manifest has disablePolicyChecks: true. Also, even if I manually change that line in the manifest and re-apply the manifest, the istio system doesn’t enable policy.
disablePolicyChecks: true appears twice in the manifest you have to change both. Which istio version you are using?