Pilot env variables

[lucasloeffel]

Hello,

i want to set the ENABLE_TLS_ON_SIDECAR_INGRESS env variable (--set values.pilot.env.ENABLE_TLS_ON_SIDECAR_INGRESS=true) in a managed anthos env. 

is there any way to do that? 

thanks

[lawrencenelson]

Hi @lucasloeffel,

Welcome to the Google Cloud Community!

I understand you are referring to the ENABLE_TLS_ON_SIDECAR_INGRESS variable in Istio, not Anthos. If that's the case, you can modify your configuration by creating a YAML file:

istiotls.yaml:

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  components:
    pilot:
      k8s:
        env:
          - name: ENABLE_TLS_ON_SIDECAR_INGRESS
            value: "true"

After creating the file, apply the configuration using the following command:

istioctl upgrade -f istiotls.yaml

If, however, you are looking to achieve a similar setup for enabling TLS on sidecar ingress in Anthos, I recommend exploring mutual TLS (mTLS) configurations within Anthos Service Mesh.

I hope this answers your question. Thank you.