Add IKS istio images to default ibm-system policy (#198)

The IKS Istio addon runs some images in ibm-system as part of the install process. Portieris by default blocks these and causes the install to misbehave. Adding to the default policy to minimise disruption to IKS rollouts. Co-authored-by: Stuart Hayton <[email protected]>
IBM · Oct 22, 2020 · 85a7f97 · 85a7f97
1 parent b9c2052
commit 85a7f97
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/helm/portieris/templates/policies.yaml b/helm/portieris/templates/policies.yaml
@@ -60,6 +60,7 @@ spec:
     - name: "icr.io/armada/*"
     - name: "icr.io/armada-worker/*"
     - name: "icr.io/armada-master/*"
+    - name: "icr.io/ext/istio/*"
 ---
 {{ end }}
 apiVersion: securityenforcement.admission.cloud.ibm.com/v1beta1