Enabling Policy Enforcement

    In the default Istio installation profile, policy enforcement is disabled. To install Istiowith policy enforcement on, use the install option.

    Alternatively, you may install Istio using the demo profile,which enables policy checks by default.

    If policy enforcement is enabled ( is false), no further action is needed.

    • Edit the configmap to enable policy checks.

    Execute the following command from the root Istio directory:

    Using Istio to secure multi-cloud Kubernetes applications with zero code changes.

    Improving availability and reducing latency.

    Mixer Adapter Model

    Shows how to modify request headers and routing using policy adapters.

    Denials and White/Black Listing

    Shows how to control access to a service using simple denials or white/black listing.

    This task shows you how to use Istio to dynamically limit the traffic to a service.