 <span class="nt">-n</span> istio-system
</code></pre></div></div><p>Service account that runs application pods need privileged security context constraints as part of sidecar injection.</p><div class="language-bash highlighter-rouge"><div class="highlight"><pre class="highlight"><code>  oc adm policy add-scc-to-user privileged <span class="nt">-z</span> default <span class="nt">-n</span> &lt;target-namespace&gt;
</code></pre></div></div><h3 id="aws-wkops">AWS (w/Kops)</h3><p>When you install a new cluster 