UNCLASSIFIED

README.md 1.08 KB
Newer Older
gavin.scallon's avatar
gavin.scallon committed
1
# sidecar_injector
gavin.scallon's avatar
gavin.scallon committed
2

gavin.scallon's avatar
gavin.scallon committed
3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
# To Run
```
# Navigate to the download location of the galley tar file obtained from the 
# Iron Bank and run podman load to create the image.
podman load -i sidecar_injector.tar.gz
podman run sidecar_injector
```

## Notes

In order to take advantage of all of Istio’s features, pods in the mesh must be 
running an Istio sidecar proxy. You can automatically inject a sidecar proxy
by applying the istio-sidecar-injector ConfigMap. When enabled in a pod’s 
namespace, automatic injection injects the proxy configuration at pod creation 
time using an admission controller.You must be sure to change
any references to the default sidecar_injector image to utilize the Iron Bank
version in order to ensure the hardened image is used after download.

Refer to the following documentation for more information on the 
Istio sidecar_injector:
- Installation/injection: 
https://istio.io/docs/setup/additional-setup/sidecar-injection/

- Commands/configuration:
https://istio.io/docs/reference/commands/sidecar-injector/

- Common issues:
https://istio.io/docs/ops/common-problems/injection/