UNCLASSIFIED - NO CUI

Update EK Upgrade Job to work with Istio Injection

Similar to https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/redis/-/issues/2 we need to update the upgrade-job used by the EK package to work while being istio-injected to satisfy OPA Gatekeeper constraints.

AC:

  • Remove the sidecar.istio.io/inject: 'false' annotation from the Job
  • Ensure job still functions upon chart upgrade and exists successfully (istio-proxy pod isn't kept running)
  • Verify all pods are deployed in namespace with istio sidecar
  • Verify all pods reach ready state
Edited by Tunde Oladipupo