identify namespaces that dont use istio via label. Enable istio in twistlock

Summary

Identify each applications use of istio

also enable it in Twistlock

added kinddocs label

added 1 commit

• 607a8166 - add sonarqube namespace labels

Compare with previous version

Gitlab-runner doesn't need it's own namespace right?

It should deploy in the gitlab namespace so it can utilize the shared-secrets to connect to Gitlab.

added 1 commit

• 2cfe2dd3 - Remove extra gitlab-runner namespace

Compare with previous version

added statusreview label

assigned to @ryan.j.garcia and @micah.nagel

resolved all threads

resolved all threads

added 1 commit

• 24e81c77 - Apply 3 suggestion(s) to 3 file(s)

Compare with previous version

approved this merge request

unapproved this merge request

Before this can be merged, we need to make sure that none of these will be denied by OPA Gatekeeper due to "namespacesHaveIstio". That constraint matches namespaces without the label "admission.gatekeeper.sh/ignore". So, either that label needs to be present or the namespace needs to be ignored in the constraint.

Will merge this at the beginning of next sprint. Istio injection policy is not set to deny yet.

resolved all threads

changed milestone to %1.14.0

mentioned in issue #611 (closed)

approved this merge request

merged

mentioned in commit 234c3674