identify namespaces that dont use istio via label. Enable istio in twistlock

chart/templates/anchore/namespace.yaml

@@ -3,6 +3,9 @@ apiVersion: v1
 kind: Namespace
 metadata:
   labels:
-    app: {{ .Release.Name }}-anchore
+    app.kubernetes.io/name: anchore
+    app.kubernetes.io/component: "security"
+    {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
   name: anchore
 {{- end }}
\ No newline at end of file

chart/templates/argocd/namespace.yaml

@@ -6,5 +6,6 @@ metadata:
     app.kubernetes.io/name: authservice
     app.kubernetes.io/component: "core"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
   name: argocd
 {{- end }}

chart/templates/gatekeeper/namespace.yaml

@@ -9,5 +9,6 @@ metadata:
     app.kubernetes.io/name: gatekeeper
     app.kubernetes.io/component: "core"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
   name: gatekeeper-system
 {{- end }}
\ No newline at end of file

chart/templates/gitlab-runner/namespace.yaml

+{{- if or .Values.addons.gitlab.enabled .Values.addons.gitlabRunner.enabled }}
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    app.kubernetes.io/name: gitlab-runner
+    app.kubernetes.io/component: "developer-tools"
+    {{- include "commonLabels" . | nindent 4}}
+    istio-injection: enabled
+  name: gitlab-runner
+{{- end }}
\ No newline at end of file

chart/templates/gitlab/namespace.yaml

@@ -6,5 +6,6 @@ metadata:
     app.kubernetes.io/name: gitlab
     app.kubernetes.io/component: "developer-tools"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
   name: gitlab
 {{- end }}
\ No newline at end of file

chart/templates/istio/controlplane/namespace.yaml

@@ -7,4 +7,5 @@ metadata:
     app.kubernetes.io/name: istio-controlplane
     app.kubernetes.io/component: "core"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
 {{- end }}
\ No newline at end of file

chart/templates/keycloak/namespace.yaml

@@ -5,7 +5,7 @@ kind: Namespace
 metadata:
   name: {{ $name }}
   labels:
-    istio-injection: disabled-because-keycloak-hates-istio
+    istio-injection: disabled
     app.kubernetes.io/name: {{ $name }}
     app.kubernetes.io/component: "security-tools"
     {{- include "commonLabels" . | nindent 4}}

chart/templates/logging/eck-operator/namespace.yaml

@@ -7,4 +7,5 @@ metadata:
     app.kubernetes.io/name: eck-operator
     app.kubernetes.io/component: "core"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
 {{- end }}
\ No newline at end of file

chart/templates/mattermost/mattermost/namespace.yaml

@@ -7,5 +7,6 @@ metadata:
     app.kubernetes.io/name: mattermost
     app.kubernetes.io/component: "collaboration-tools"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
   name: mattermost
 {{- end }}
\ No newline at end of file

chart/templates/mattermost/operator/namespace.yaml

@@ -8,4 +8,5 @@ metadata:
     app.kubernetes.io/name: mattermost-operator
     app.kubernetes.io/component: "collaboration-tools"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
 {{- end }}

chart/templates/minio/minio-operator/namespace.yaml

@@ -8,4 +8,5 @@ metadata:
     app.kubernetes.io/name: minioOperator
     app.kubernetes.io/component: "application-utilities"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
 {{- end }}
\ No newline at end of file

chart/templates/minio/minio/namespace.yaml

@@ -8,4 +8,5 @@ metadata:
     app.kubernetes.io/name: minio
     app.kubernetes.io/component: "application-utilities"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
 {{- end }}

chart/templates/monitoring/namespace.yaml

@@ -7,4 +7,5 @@ metadata:
     app.kubernetes.io/name: monitoring
     app.kubernetes.io/component: "core"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: disabled
 {{- end }}
\ No newline at end of file

chart/templates/twistlock/namespace.yaml

@@ -7,4 +7,5 @@ metadata:
     app.kubernetes.io/name: twistlock
     app.kubernetes.io/component: "security"
     {{- include "commonLabels" . | nindent 4}}
+    istio-injection: enabled
 {{- end }}
\ No newline at end of file