add note about opting individual pods out of dns-proxy (#16799)

Signed-off-by: Ian Rudie <ian.rudie@solo.io>
This commit is contained in:
Ian Rudie 2025-08-21 10:34:24 -04:00 committed by GitHub
parent 6e4d407cb3
commit a94f84efa4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 2 additions and 0 deletions

View File

@ -26,6 +26,8 @@ DNS proxying is enabled by default in ambient mode from Istio 1.25 onwards.
For versions prior to 1.25, you can enable DNS capture by setting `values.cni.ambient.dnsCapture=true` and `values.pilot.env.PILOT_ENABLE_IP_AUTOALLOCATE=true` during installation.
Individual pods may opt-out of global ambient mode DNS capture by applying the`ambient.istio.io/dns-capture=false` annotation.
### Sidecar mode
This feature is not currently enabled by default. To enable it, install Istio with the following settings: