Maistra ServiceMeshControlPlane and Mesh in same namespace/project on OpenShift4

6/11/2021

Let's assume I have a project/namespace on OpenShift 4 which is called my-namespace.

Is possible to run a service mesh control plane within my-namespace and at the same time make this namespace part of a ServiceMeshMemberRoll?

Can I somehow have an istio sidecar injected into any deployments within my-namespace?

It seems that autoinjection of sidecars is disabled whenever a control plane is created within the namespace, because the label maistra.io/ignore-namespace is automatically added to the namespace, which prevents the controller from injection a sidecar into any deployment, even if pod is annotated with sidecar.istio.io/inject: 'true'. (source)

When I try to add my-namespace to the default ServiceMeshMemberRoll the controller removes my-namespace member from the manifest.

Am I trying to do something, that was never meant to be done this way?

-- Tobi
istio
kubernetes
openshift
servicemesh

0 Answers