Kops
If you wish to run Istio Secret Discovery Service4 (SDS) for your mesh on Kops managed clusters, you must add extra configurations to enable service account token projection volumes in the api-server.
Open the configuration file:
Add the following in the configuration file:
Perform the update:
Launch the rolling update: