exclude istio-init containers from require-non-root-group

Package Merge Request

Package Changes

Adding support to exclude istio-init initContainers from non-root-group policies

Package MR

big-bang/product/packages/kyverno-policies!82 (merged)

For Issue

Closes big-bang/product/packages/kyverno-policies#43 (closed)

chart/templates/kyverno-policies/values.yaml

@@ -184,6 +184,11 @@ policies:
 
   require-non-root-group:
     validationFailureAction: audit
+    {{- if .Values.istio.enabled }}
+    parameters:
+      excludeContainers:
+        - istio-init
+    {{- end }}
     {{- if or $deployNodeAgent .Values.twistlock.enabled .Values.fluentbit.enabled .Values.promtail.enabled }}
     exclude:
       any: