fluentbit auth pol gets generated

added kindbug label

changed the description

set weight to 1

created branch 212-fluentbit-auth-pol-gets-generated to address this issue

@jeffv it looks like istio.hardened.fluentbit.enabled is true by default, but only really comes into play with istio.enabled and istio.hardened.enabled are also set to true. This is also the case with several other authpol integrations within loki for monitoring, promtail, and minio.

Is there a security concern for creating the auth policy even in cases where no workload matches its selectors? It doesn't seem like this auth policy getting created is actually causing an issue. We can of course set these all to false by default and then create logic within big bang umbrella to set them to true according to their respective needs, but I'm not convinced that's worth the effort here. I know you have more context with the project though so I'd really be interested in your thoughts on this.

Heya Zach, it doesn't necessarily need to happen, but just cleaning up stale resources whenever we get the chance to do so.

@jeffv this issue has been inactive for 30 days and is being labelled as stale. If this issue is still required please take action by removing the stale label and commenting with an update, status, or justification. If this issue is not required please close it or label it as delete-me. If no action is taken this issue will be auto closed in 60 days.