istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

update index.md (#6027) 

* update index.md

* Update index.md

* Updation

* updated config
This commit is contained in:
LokeshAggarwal1997 2020-01-07 19:56:54 +05:30 committed by Frank Budinsky
parent ef932a9bb7
commit b67b652561
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
content/en/docs/tasks/policy-enforcement/enabling-policy/index.md
View File

@ -10,7 +10,7 @@ This task shows you how to enable Istio policy enforcement.
## At install time ## At install time
In the default Istio installation profile, policy enforcement is disabled. To install Istio In the default Istio installation profile, policy enforcement is disabled. To install Istio
with policy enforcement on, use the `--set values.global.disablePolicyChecks=false` install option. with policy enforcement on, use the `--set values.global.disablePolicyChecks=false` and `--set values.pilot.policy.enabled=true` install option.
Alternatively, you may [install Istio using the demo profile](/docs/setup/getting-started/), Alternatively, you may [install Istio using the demo profile](/docs/setup/getting-started/),
which enables policy checks by default. which enables policy checks by default.
@ -26,13 +26,13 @@ which enables policy checks by default.
If policy enforcement is enabled (`disablePolicyChecks` is false), no further action is needed. If policy enforcement is enabled (`disablePolicyChecks` is false), no further action is needed.
1. Edit the `istio` configmap to enable policy checks. 1. Update the `istio` configuration to enable policy checks.
Execute the following command from the root Istio directory: Execute the following command from the root Istio directory:
{{< text bash >}} {{< text bash >}}
$ istioctl manifest apply --set values.global.disablePolicyChecks=false $ istioctl manifest apply --set values.global.disablePolicyChecks=false --set values.pilot.policy.enabled=true
configmap "istio" replaced configuration "istio" replaced
{{< /text >}} {{< /text >}}
1. Validate that policy enforcement is now enabled. 1. Validate that policy enforcement is now enabled.