Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

zh-translation: /docs/tasks/policy-enforcement/enabling-policy/index.md #6400

Merged
merged 1 commit into from Feb 5, 2020
Merged

zh-translation: /docs/tasks/policy-enforcement/enabling-policy/index.md #6400

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
7 changes: 3 additions & 4 deletions content/zh/docs/tasks/policy-enforcement/enabling-policy/index.md
View file
Open in desktop
Expand Up @@ -9,7 +9,7 @@ keywords: [policies]

## 安装阶段{#at-install-time}

在默认的 Istio 安装配置中，策略检查功能是关闭的。若要开启策略检查功能，需在安装选项中加入`--set values.global.disablePolicyChecks=false`。
在默认的 Istio 安装配置中，策略检查功能是关闭的。若要开启策略检查功能，需在安装选项中加入`--set values.global.disablePolicyChecks=false` 和 `--set values.pilot.policy.enabled=true`。

或者，也可以[按示例配置安装 Istio](/zh/docs/setup/getting-started/)，其中策略检查功能已默认开启。

Expand All @@ -24,13 +24,12 @@ keywords: [policies]

如果策略检查功能已开启（`disablePolicyChecks`置为 false），则无需再做什么。

1. 修改 `istio` configmap，开启策略检查功能。
1. 修改 `istio` configuration，开启策略检查功能。

在 Istio 根目录执行以下指令：

{{< text bash >}}
$ istioctl manifest apply --set values.global.disablePolicyChecks=false
configmap "istio" replaced
$ istioctl manifest apply --set values.global.disablePolicyChecks=false --set values.pilot.policy.enabled=true configuration "istio" replaced
{{< /text >}}

1. 验证策略检查功能是否已启用。
Expand Down