UNCLASSIFIED - NO CUI

Skip to content

Enable monitoring istio injection

Mark Sanchez requested to merge enable-monitoring-istio-injection into master

Package Owner Merge Request

Package Changes

  • enable istio-injection on monitoring namespace
  • added prometheus sidecar config
  • added containers to terminate istio-proxy when admissionWebhook job completes
  • egress network policy to istio resources
  • Istio AuthorizationPolicy for intra monitoring namespace communications (previously were being protected by authservice)
  • Istio AuthorizationPolicy for Kiali to prometheus communications

BigBang Changes

  • Removing virtualservice values for monitoring package to not point to haproxy, but reverting back to the normal istio-injected prometheus/alertmanager services.
  • Added authservice as monitoring HelmRelease dependency

Links to all MRs that are associated with this change are required.

Additional Details

Closes https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/issues/23

Closes https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/issues/48

Closes #872 (closed)

Add any labels for affected packages so that they are deployed in CI. See example:

Once the MR is ready for review also add the status::review label.

Edited by Micah Nagel

Merge request reports