Merge branch '215-implement-istio-authorization-policies' into 'main'

Resolve "Implement Istio Authorization Policies"

See merge request !271

CHANGELOG.md

@@ -2,6 +2,10 @@
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [7.11.1-bb.2] (2024-05-15)
+### Changed
+- Changed the istio sidecar inject back to false so gitlab can come up
+
 ## [7.11.1-bb.1] (2024-05-13)
 ### Removed
 - Removed the kubeversion from chart

README.md

 # gitlab
 
-![Version: 7.11.1-bb.1](https://img.shields.io/badge/Version-7.11.1--bb.1-informational?style=flat-square) ![AppVersion: 16.11.1](https://img.shields.io/badge/AppVersion-16.11.1-informational?style=flat-square)
+![Version: 7.11.1-bb.2](https://img.shields.io/badge/Version-7.11.1--bb.2-informational?style=flat-square) ![AppVersion: 16.11.1](https://img.shields.io/badge/AppVersion-16.11.1-informational?style=flat-square)
 
 GitLab is the most comprehensive AI-powered DevSecOps Platform.
 
@@ -411,7 +411,7 @@ helm install gitlab chart/
 | upgradeCheck.securityContext.runAsGroup | int | `65534` |  |
 | upgradeCheck.securityContext.fsGroup | int | `65534` |  |
 | upgradeCheck.tolerations | list | `[]` |  |
-| upgradeCheck.annotations."sidecar.istio.io/inject" | string | `"true"` |  |
+| upgradeCheck.annotations."sidecar.istio.io/inject" | string | `"false"` |  |
 | upgradeCheck.configMapAnnotations | object | `{}` |  |
 | upgradeCheck.resources.requests.cpu | string | `"500m"` |  |
 | upgradeCheck.resources.requests.memory | string | `"500Mi"` |  |
@@ -792,7 +792,7 @@ helm install gitlab chart/
 | shared-secrets.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | shared-secrets.tolerations | list | `[]` |  |
 | shared-secrets.podLabels | object | `{}` |  |
-| shared-secrets.annotations."sidecar.istio.io/inject" | string | `"true"` |  |
+| shared-secrets.annotations."sidecar.istio.io/inject" | string | `"false"` |  |
 | gitlab-runner.install | bool | `false` |  |
 | gitlab-runner.rbac.create | bool | `true` |  |
 | gitlab-runner.runners.locked | bool | `false` |  |
@@ -860,7 +860,7 @@ helm install gitlab chart/
 | gitlab.gitlab-exporter.containerSecurityContext.runAsUser | int | `1000` |  |
 | gitlab.gitlab-exporter.containerSecurityContext.runAsGroup | int | `1000` |  |
 | gitlab.gitlab-exporter.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
-| gitlab.migrations.annotations."sidecar.istio.io/inject" | string | `"true"` |  |
+| gitlab.migrations.annotations."sidecar.istio.io/inject" | string | `"false"` |  |
 | gitlab.migrations.init.resources.limits.cpu | string | `"500m"` |  |
 | gitlab.migrations.init.resources.limits.memory | string | `"768Mi"` |  |
 | gitlab.migrations.init.resources.requests.cpu | string | `"500m"` |  |
@@ -1010,7 +1010,7 @@ helm install gitlab chart/
 | minio.containerSecurityContext.runAsGroup | int | `1000` |  |
 | minio.containerSecurityContext.runAsNonRoot | bool | `true` |  |
 | minio.containerSecurityContext.capabilities.drop[0] | string | `"ALL"` |  |
-| minio.jobAnnotations."sidecar.istio.io/inject" | string | `"true"` |  |
+| minio.jobAnnotations."sidecar.istio.io/inject" | string | `"false"` |  |
 | minio.image | string | `"registry1.dso.mil/ironbank/opensource/minio/minio"` |  |
 | minio.imageTag | string | `"RELEASE.2022-12-12T19-27-27Z"` |  |
 | minio.pullSecrets[0].name | string | `"private-registry"` |  |

chart/Chart.yaml

 ---
 apiVersion: v1
 name: gitlab
-version: 7.11.1-bb.1
+version: 7.11.1-bb.2
 appVersion: 16.11.1
 description: GitLab is the most comprehensive AI-powered DevSecOps Platform.
 keywords:

chart/values.yaml

@@ -940,7 +940,7 @@ upgradeCheck:
   #      - ALL
   tolerations: []
   annotations:
-    sidecar.istio.io/inject: "true"
+    sidecar.istio.io/inject: "false"
   configMapAnnotations: {}
   resources:
     requests:
@@ -1486,7 +1486,7 @@ shared-secrets:
   tolerations: []
   podLabels: {}
   annotations:
-    sidecar.istio.io/inject: "true"
+    sidecar.istio.io/inject: "false"
 
 ## Installation & configuration of gitlab/gitlab-runner
 ## See requirements.yaml for current version
@@ -1653,7 +1653,7 @@ gitlab:
   migrations:
     # istio sidecar injection for the migration job causes difficult errors. disable istio for this job
     annotations:
-      sidecar.istio.io/inject: "true"
+      sidecar.istio.io/inject: "false"
     init:
       resources:
         limits:
@@ -1983,7 +1983,7 @@ minio:
         - ALL
   # Additional job annotations
   jobAnnotations:
-    sidecar.istio.io/inject: "true"
+    sidecar.istio.io/inject: "false"
   # use Ironbank hardened images for MinIO
   image: registry1.dso.mil/ironbank/opensource/minio/minio
   imageTag: RELEASE.2022-12-12T19-27-27Z