UNCLASSIFIED - NO CUI

Incorrect Label Selector for Gitlab AuthorizationPolicy

Bug

Description

When running with Values.istio.hardened.enabled, the monitoring-authz-policy uses an invalid selector app.kubernetes.io/name: gitlab. Gitlab pods also using the old selector types such as app: gitlab, app: webservice, with the exception of redis (from the subchart) which uses app.kubernetes.io/name: redis and app.kubernetes.io/instance: gitlab.

Since there are multiple pods in the gitlab namespace which have Prometheus monitoring requirements, the common label release: gitlab would be a good candidate for a catch-all (with the exception of redis).

BigBang Version

2.27.0

CC @andrewshoell