From 8d69e1e811adefe1f18d80b1550eba2ece1ac64d Mon Sep 17 00:00:00 2001
From: Guilherme Blanco <guilhermeblanco@gmail.com>
Date: Fri, 15 Jun 2018 13:19:57 -0400
Subject: [PATCH] Added annotation to pod to prevent istio-sidecar-injector to
 add an envoy-proxy

---
 pkg/issuer/acme/http/pod.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkg/issuer/acme/http/pod.go b/pkg/issuer/acme/http/pod.go
index 76f382651..9ddbaad7a 100644
--- a/pkg/issuer/acme/http/pod.go
+++ b/pkg/issuer/acme/http/pod.go
@@ -113,6 +113,9 @@ func (s *Solver) buildPod(crt *v1alpha1.Certificate, ch v1alpha1.ACMEOrderChalle
 			GenerateName:    "cm-acme-http-solver-",
 			Namespace:       crt.Namespace,
 			Labels:          podLabels,
+			Annotations: map[string]string{
+				"sidecar.istio.io/inject": "false",
+			},
 			OwnerReferences: []metav1.OwnerReference{*metav1.NewControllerRef(crt, certificateGvk)},
 		},
 		Spec: corev1.PodSpec{