UNCLASSIFIED - NO CUI

Skip to content

istio-crds and istiod have constant flux drift

Motivation

The ValidatingWebhookConfiguration resources created by istio-crds and istiod are drifting due to the istiod pod taking ownership of their configuration once it reaches a steady state. The failurePolicy should be ignored to allow this management to take place.

Acceptance Criteria

  • webhooks[0].failurePolicy must be ignored for the purpose of drift detection

UNCLASSIFIED - NO CUI