CHANGELOG.md

@@ -4,6 +4,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ---
 
+## [14.1.0-bb.4]
+### Changed
+- Removed `sidecar.istio.io/inject: 'false'` annotation from clean upgrade job and added `curl -X POST http://localhost:15020/quitquitquit` to cleanly terminate the istio sidecar container when the job completes. This was done to resolve OPA Gatekeeper violations
+
 ## [14.1.0-bb.3]
 ### Changed
 - Updated clean upgrade job to include resource requests and limits in order to resolve OPA Gatekeeper violations

chart/Chart.yaml

@@ -25,4 +25,4 @@ name: redis
 sources:
   - https://github.com/bitnami/bitnami-docker-redis
   - http://redis.io/
-version: 14.1.0-bb.3
+version: 14.1.0-bb.4

chart/templates/bigbang/redis-upgrade.yaml

@@ -84,8 +84,6 @@ spec:
   template:
     metadata:
       name: redis-clean-upgrade
-      annotations:
-        sidecar.istio.io/inject: 'false'
       labels:
         app.kubernetes.io/name: bigbang-redis-upgrade-job
     spec:
@@ -124,6 +122,11 @@ spec:
                 echo "No PVCs to clean up."
               fi
               echo "Done with upgrade steps."
+
+              {{- if .Values.istio.enabled }}
+              echo "Terminating istio sidecar container..."
+              curl -X POST http://localhost:15020/quitquitquit
+              {{- end }}
           {{- if .Values.cleanUpgrade.resources }}
           resources: {{- toYaml .Values.cleanUpgrade.resources | nindent 12 }}
           {{- end }}