diff --git a/_docs/setup/kubernetes/quick-start.md b/_docs/setup/kubernetes/quick-start.md index 29abed422b..fd3f2cd660 100644 --- a/_docs/setup/kubernetes/quick-start.md +++ b/_docs/setup/kubernetes/quick-start.md @@ -60,10 +60,11 @@ support). * [Openshift Origin](https://www.openshift.org) version 3.7 or later * Openshift by default does not allow containers running with UID 0. Enable containers running -with UID 0 for Istio's service accounts for ingress and egress: +with UID 0 for Istio's service accounts for ingress as well the Prometheus and Grafana addons: ```bash oc adm policy add-scc-to-user anyuid -z istio-ingress-service-account -n istio-system - oc adm policy add-scc-to-user anyuid -z default -n istio-system + oc adm policy add-scc-to-user anyuid -z istio-grafana-service-account -n istio-system + oc adm policy add-scc-to-user anyuid -z istio-prometheus-service-account -n istio-system ``` * Service account that runs application pods need privileged security context constraints as part of sidecar injection.