Istio shared policies

General MR

Summary

Epic big-bang/bigbang#2030 (closed) work to remove shared policies being set at the Istio level

Relevant logs/screenshots

N/A

Linked Issue

big-bang/bigbang#2093 (closed)

Upgrade Notices

N/A

changed milestone to %2.31.0

added eckoperator elasticsearchKibana kindenhancement priority5 statusreview teamObservability labels

assigned to @jimmyungerman

requested review from @andrewshoell, @cwilliams68067, @lgomez2, @piotr.machaj, @steven.donald, @kliu, @w.griffing, and @blairbowden

The following overrides can be used to test functionality:

istio:
  enabled: true
  values:
    hardened:
      enabled: true

monitoring:
  enabled: true
  values:
    istio:
      enabled: true
      hardened:
        enabled: true

kiali:
  enabled: true
  values:
    istio:
      enabled: true
      hardened:
        enabled: true


eckOperator:
  enabled: true
  git:
    tag: null
    branch: "istio-shared-policies"
  values:
    istio:
      enabled: true
      hardened:
        enabled: true

elasticsearchKibana:
  enabled: true
  git:
    tag: null
    branch: "istio-shared-policies"
  license:
    trial: true
  values:
    istio:
      enabled: true
      hardened:
        enabled: true

kyverno:
  enabled: true
kyvernoPolicies:
  enabled: true
  values:
    policies:
      restrict-host-path-mount-pv:
        parameters:
          allow:
          - /var/lib/rancher/k3s/storage/pvc-*

fluentbit: 
  enabled: true
  git:
    tag: null
    branch: "istio-shared-policies"
  values:
    istio:
      enabled: true
      hardened:
        enabled: true

added 1 commit

• adf5ed9c - rename folder

Compare with previous version

approved this merge request

mentioned in commit 5f6e1a82

merged

mentioned in merge request big-bang/bigbang!4641 (merged)