Injected pods with 'istio-init' containers violate require-non-root-group policy

There are some namespaces/resources, not included in exclusions, which are injected with the 'istio-init' initContainer that violate the 'require-non-root-group' policy.

mentioned in merge request !80 (closed)

mentioned in merge request !82 (merged)

mentioned in merge request big-bang/bigbang!3078 (merged)

closed with merge request big-bang/bigbang!3078 (merged)

mentioned in commit big-bang/bigbang@b0a2d543

reopened

Re-opening as post 1.10 Kyverno (merged in to packages last week) this exception no longer works.

set weight to 3

added kindenhancement kyverno priority3 statusdoing + 1 deleted label

changed iteration to Big Bang Iterations Sep 19, 2023 - Oct 2, 2023

changed milestone to %2.12.0

assigned to @ryan.j.garcia

mentioned in merge request big-bang/bigbang!2304 (closed)

removed statusdoing label

unassigned @ryan.j.garcia

changed iteration to Big Bang Iterations Oct 3, 2023 - Oct 16, 2023

changed milestone to %2.13.0

assigned to @massey.robert

added statusdoing label

removed iteration Big Bang Iterations Oct 3, 2023 - Oct 16, 2023

changed iteration to Big Bang Iterations Oct 17, 2023 - Oct 30, 2023

set weight to 2

mentioned in merge request !94 (closed)

changed milestone to %2.14.0

Closing this as Kyverno updates have allowed this exception to work properly again

closed

reopened

Tests failed in most recent release pipeline. This is not resolved

changed milestone to %2.15.0

mentioned in merge request big-bang/customers/template!65 (closed)

mentioned in merge request !104 (merged)

added statusreview label and removed statusdoing label

mentioned in merge request big-bang/bigbang!3414 (merged)

closed with merge request big-bang/bigbang!3414 (merged)

mentioned in commit big-bang/bigbang@d9c21675