Updated istio namespace to follow standard labels when in ambient mode

General MR

Summary

• Updated istio-system and istio-gateway namespaces to use new helper along with standard additional labels when in ambient mode

Relevant logs/screenshots

Before Changes:

kubectl get ns istio-system -o yaml

apiVersion: v1
kind: Namespace
metadata:
  annotations:
    meta.helm.sh/release-name: bigbang
    meta.helm.sh/release-namespace: bigbang
  creationTimestamp: "2026-08-10T19:31:09Z"
  labels:
    app.kubernetes.io/component: core
    app.kubernetes.io/instance: bigbang
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: istio-system
    app.kubernetes.io/part-of: bigbang
    app.kubernetes.io/version: 3.30.0
    helm.sh/chart: bigbang-3.30.0
    istio-base-managed: Reconcile
    istio-injection: disabled
    kubernetes.io/metadata.name: istio-system
...

kubectl get ns istio-gateway -o yaml

apiVersion: v1
kind: Namespace
metadata:
  annotations:
    meta.helm.sh/release-name: bigbang
    meta.helm.sh/release-namespace: bigbang
  creationTimestamp: "2026-08-10T19:31:09Z"
  labels:
    app.kubernetes.io/component: core
    app.kubernetes.io/instance: bigbang
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: istio-gateway
    app.kubernetes.io/part-of: bigbang
    app.kubernetes.io/version: 3.30.0
    helm.sh/chart: bigbang-3.30.0
    istio-gateway-managed: Reconcile
    istio-injection: enabled
    kubernetes.io/metadata.name: istio-gateway
...

After Changes

kubectl get ns istio-system -o yaml

apiVersion: v1
kind: Namespace
metadata:
  annotations:
    meta.helm.sh/release-name: bigbang
    meta.helm.sh/release-namespace: bigbang
  creationTimestamp: "2026-08-10T19:31:09Z"
  labels:
    app.kubernetes.io/component: core
    app.kubernetes.io/instance: bigbang
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: istio-system
    app.kubernetes.io/part-of: bigbang
    app.kubernetes.io/version: 3.30.0
    helm.sh/chart: bigbang-3.30.0
    istio-base-managed: Reconcile
    istio-injection: disabled
    istio.io/dataplane-mode: none
    kubernetes.io/metadata.name: istio-system
...

kubectl get ns istio-gateway -o yaml

apiVersion: v1
kind: Namespace
metadata:
  annotations:
    meta.helm.sh/release-name: bigbang
    meta.helm.sh/release-namespace: bigbang
  creationTimestamp: "2026-08-10T19:31:09Z"
  labels:
    app.kubernetes.io/component: core
    app.kubernetes.io/instance: bigbang
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: istio-gateway
    app.kubernetes.io/part-of: bigbang
    app.kubernetes.io/version: 3.30.0
    helm.sh/chart: bigbang-3.30.0
    istio-gateway-managed: Reconcile
    istio.io/dataplane-mode: ambient
    kubernetes.io/metadata.name: istio-gateway
...

Linked Issue

issue

Upgrade Notices

N/A