mirror of
https://github.com/holos-run/holos.git
synced 2026-03-21 09:45:00 +00:00
This patch enforces the restricted pod security profile on the istio ingress namespace. The istio cni to move the traffic redirection from the init container to a cni daemon set pod. Refer to: - https://istio.io/latest/docs/setup/additional-setup/pod-security-admission/ - https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted