Update KyvernoPolicies 3.0.4-bb.8 and add istio-init PolicyException

Package Merge Request

Package Changes

Updating KyvernoPolicies package which includes PolicyException template when istio.enabled=true is passed into KP package to properly exempt istio-init containers from the require-non-root-group CP.

Package MR

big-bang/product/packages/kyverno-policies!104 (merged)

For Issue

Closes big-bang/product/packages/kyverno-policies#43 (closed)

Closes big-bang/product/packages/kyverno-policies#51 (closed)

chart/templates/kyverno-policies/values.yaml

@@ -651,7 +651,8 @@ policies:
         pods:
         - istiod-*
         - istio-operator-*
-
+istio:
+  enabled: {{ .Values.istio.enabled }}
 
 {{- end }}