Fix Docker rate limit issues in Istio sidecars

Earlier this month, Dockerhub announced that they would be enforcing limits on image pulls. That has meant that I’ve had to deal with several unforseen problems, like Istio defaulting to “Always” for their sidecar (and other services) ImagePullPolicy.

Fortunately, the ImagePullPolicy can be configured through the Istio Operator. This is the change you need to add to the operator yaml:

# op
apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
namespace: istio-system
name: foo
spec:
profile: default
values:
global:
imagePullPolicy: IfNotPresent

After that, just use istioctl to update the configuration:

istioctl install -f operator.yaml

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store