istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Change the installation instructions for Openshift (#856) 

The documentation change here reflects the work that was done on:
https://github.com/istio/istio/pull/2465
and should only be merged IFF the aforementioned PR is merged
This commit is contained in:
Georgios Andrianakis 2018-01-25 21:33:32 +02:00 committed by Shriram Rajagopalan
parent dc3511ed14
commit 9e6c08bb9a
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
_docs/setup/kubernetes/quick-start.md
View File

@ -60,10 +60,11 @@ support).
* [Openshift Origin](https://www.openshift.org) version 3.7 or later * [Openshift Origin](https://www.openshift.org) version 3.7 or later
* Openshift by default does not allow containers running with UID 0. Enable containers running * Openshift by default does not allow containers running with UID 0. Enable containers running
with UID 0 for Istio's service accounts for ingress and egress: with UID 0 for Istio's service accounts for ingress as well the Prometheus and Grafana addons:
```bash ```bash
oc adm policy add-scc-to-user anyuid -z istio-ingress-service-account -n istio-system oc adm policy add-scc-to-user anyuid -z istio-ingress-service-account -n istio-system
oc adm policy add-scc-to-user anyuid -z default -n istio-system oc adm policy add-scc-to-user anyuid -z istio-grafana-service-account -n istio-system
oc adm policy add-scc-to-user anyuid -z istio-prometheus-service-account -n istio-system
``` ```
* Service account that runs application pods need privileged security context constraints as part of sidecar injection. * Service account that runs application pods need privileged security context constraints as part of sidecar injection.