istio.io/content/en/docs/setup/platform-setup/kops/index.md

title	description	weight	skip_seealso	keywords	owner	test
Kops	Instructions to setup Kops for use with Istio.	33	true	platform-setup kubernetes kops	istio/wg-environments-maintainers	no

If you wish to run Istio Secret Discovery Service (SDS) for your mesh on Kops managed clusters, you must add extra configurations to enable service account token projection volumes in the api-server.

1. Open the configuration file:

   {{< text bash >}} $ kops edit cluster $YOURCLUSTER {{< /text >}}

2. Add the following in the configuration file:

   {{< text yaml >}} kubeAPIServer: apiAudiences: - api - istio-ca serviceAccountIssuer: kubernetes.default.svc serviceAccountKeyFile: - /srv/kubernetes/server.key serviceAccountSigningKeyFile: /srv/kubernetes/server.key {{< /text >}}

3. Perform the update:

   {{< text bash >}} $ kops update cluster $ kops update cluster --yes {{< /text >}}

4. Launch the rolling update:

   {{< text bash >}} $ kops rolling-update cluster $ kops rolling-update cluster --yes {{< /text >}}