Azure / Azure/AKS

[Question] AKS Istio add-on - Registry url for sidecar container

Open
#5,783 1 comment 0 reactions 1 assignee Claimed by @therealmitchconnors View on GitHub
action-required istio question
Dominant language
TypeScript
Stars
2.1k
Forks
395
Avg merge
2d 22h
Merged PRs (30d)
13

Description

**Describe scenario**
I am using the AKS Istio add-on (managed Istio) for a project. Project namespaces have a policy that only allows container images to be pulled only from an internal/private registry and not MCR (`mcr.microsoft.com`).

**Question**
Is there a supported way to configure a custom container registry URL for the Istio sidecar proxy injected by the AKS Istio add-on?
For example, in self-managed Istio this is possible via `global.hub` in the `IstioOperator` spec, but since the add-on manages the `MutatingWebhookConfiguration` and sidecar injector, it's unclear if this can be overridden. If not currently supported, is this on the roadmap?

PS: I know that [AppNet](https://learn.microsoft.com/en-us/azure/application-network/overview) is currently in preview, and I would prefer to use Ambient Mesh instead once it is GA.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.