.envoyproxy.io/docs/envoy/latest/configuration/security/secret#sds-configuration>Secret Discovery Service</a> (SDS) for your mesh on Kops managed clusters, you must add <a href=https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#service-account-token-volume-projection>extra configurations</a> to enable service account token projection volumes in the api-server.</p><ol><li><p>Open the configuration file:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$