Resolve "Implement Istio Authorization Policies"

General MR

Summary

Add Istio Authorization Policies

Relevant logs/screenshots

n/a

Linked Issue

#69 (closed)

gitlab#215 (closed)

Upgrade Notices

This requires an upgrade to K8s 1.29 for native sidecars. This gets rid of the istio-proxy container and instead builds it into the existing container. This allows jobs to exit gracefully (rather than staying alive forever because istio-proxy won't exit), and allows init containers to run because envoy is built into each of them rather than coming up after init containers would run. This requires .Values.values.pilot.env contains {"ENABLE_NATIVE_SIDECARS": true}, so if you are currently passing values there, make sure to add this to them.

added gitlab gitlabRunner kindfeature priority5 statusdoing teambigbang labels

added 1 commit

• faf30dbf - first pass at gitlab runner auth policies

Compare with previous version

assigned to @andrewshoell

blocked by gitlab#215 (comment 1891674)

added statusblocked label and removed statusdoing label

@andrewshoell this merge request has been inactive for 30 days and is being labelled as stale. If this merge request is still required please take action by removing the stale label and commenting with an update, status, or justification. If this merge request is not required please close it or label it as delete-me. If no action is taken this merge request will be auto closed in 60 days.

added stale label

added no-auto-close label and removed stale label

added statusdoing label and removed statusblocked label

added 73 commits

• faf30dbf...626a51e4 - 71 commits from branch main
• 5c91ae1f - Merge remote-tracking branch 'origin/main' into 69-implement-istio-authorization-policies
• fe7affc9 - Merge branch 'main' into 69-implement-istio-authorization-policies

Compare with previous version

added 1 commit

• cf03be37 - bumping the docs

Compare with previous version

added 1 commit

• cefa9dd8 - adding a required kubeVersion

Compare with previous version

changed the description

changed milestone to %2.26.0

blocked by big-bang/pipeline-templates/pipeline-templates#353 (closed)

added epicblocked label

removed epicblocked label

added statusblocked label and removed statusdoing label

changed milestone to %2.27.0

added 19 commits

• cefa9dd8...90508934 - 18 commits from branch main
• 180b5643 - Merge remote-tracking branch 'origin/main' into 69-implement-istio-authorization-policies

Compare with previous version