istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Document validation disabled by default when using istioctl manifest generate (#11653) 

* Document validation disabled by default when using istioctl manifest generate

* separate changes

* improve wording
This commit is contained in:
Frank Budinsky 2022-07-28 10:47:49 -04:00 committed by GitHub
parent 99b62a841b
commit 10bd965982
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
content/en/docs/setup/install/istioctl/index.md
View File

@ -231,6 +231,13 @@ If attempting to install and manage Istio using `istioctl manifest generate`, pl
1. The Istio namespace (`istio-system` by default) must be created manually.
1. Istio validation will not be enabled by default. Unlike `istioctl install`, the `manifest generate` command will
not create the `istiod-default-validator` validating webhook configuration unless `values.defaultRevision` is set:
{{< text bash >}}
$ istioctl manifest generate --set values.defaultRevision=default
{{< /text >}}
1. While `istioctl install` will automatically detect environment specific settings from your Kubernetes context,
`manifest generate` cannot as it runs offline, which may lead to unexpected results. In particular, you must ensure
that you follow [these steps](/docs/ops/best-practices/security/#configure-third-party-service-account-tokens) if your