Enable monitoring istio injection
Package Owner Merge Request
Package Changes
- enable istio-injection on monitoring namespace
- added prometheus sidecar config
- added containers to terminate istio-proxy when admissionWebhook job completes
- egress network policy to istio resources
- Istio AuthorizationPolicy for intra monitoring namespace communications (previously were being protected by authservice)
- Istio AuthorizationPolicy for Kiali to prometheus communications
BigBang Changes
- Removing virtualservice values for monitoring package to not point to haproxy, but reverting back to the normal istio-injected prometheus/alertmanager services.
- Added authservice as monitoring HelmRelease dependency
Links to all MRs that are associated with this change are required.
- https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/74
- https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/80
- https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/85
- https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/88
Additional Details
Closes https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/issues/23
Closes https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/issues/48
Closes #872 (closed)
Add any labels for affected packages so that they are deployed in CI. See example:
Once the MR is ready for review also add the status::review
label.
Edited by Micah Nagel