Istio operator

Istio-operator defines a custom resource that describes the desired state of your Istio deployment. It contains all the necessary configuration values, and, if one or more of these change, the operator automatically reconciles the state of the components to match their new desired state.

The Istio operator adds multi-cluster federation by enabling Kubernetes control planes running a remote configuration to connect to a single Istio control plane. The operator handles deployment of Istio components to remote clusters and gives a synchronization mechanism which provides access to Istio’s central components from remote clusters.

Automatically keeps track of namespaces where auto sidecar-injection is enabled, so that you can manage features centrally instead of having to label namespaces one by one.

Turn mTLS and control plane security on or off when your mesh is already in place. No need to reinstall charts or to manually delete and reconfigure internal Istio custom resources like MeshPolicies or default DestinationRules. Simply update your configurations, the operator will take care of the rest.