From 89b2cd914871a38cca5f65b8dd8f7653e95c4037 Mon Sep 17 00:00:00 2001 From: Michael Hough Date: Fri, 16 Oct 2020 10:19:18 +0100 Subject: [PATCH] Add IKS istio images to default ibm-system policy The IKS Istio addon runs some images in ibm-system as part of the install process. Portieris by default blocks these and causes the install to misbehave. Adding to the default policy to minimise disruption to IKS rollouts. --- helm/portieris/templates/policies.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/helm/portieris/templates/policies.yaml b/helm/portieris/templates/policies.yaml index 09ac7248..c2486f3c 100644 --- a/helm/portieris/templates/policies.yaml +++ b/helm/portieris/templates/policies.yaml @@ -60,6 +60,7 @@ spec: - name: "icr.io/armada/*" - name: "icr.io/armada-worker/*" - name: "icr.io/armada-master/*" + - name: "icr.io/ext/istio/*" --- {{ end }} apiVersion: securityenforcement.admission.cloud.ibm.com/v1beta1