fix: add missing standard labels to custom Istio resources

charts/kubezero-istio-ingress/templates/bootstrap-config.yaml

@@ -6,6 +6,8 @@ kind: ConfigMap
 metadata:
   name: istio-gateway-bootstrap-config
   namespace: {{ .Release.Namespace }}
+  labels:
+{{ include "kubezero-lib.labels" . | indent 4 }}
 data:
   custom_bootstrap.json: |
     {

charts/kubezero-istio-ingress/templates/envoyfilter-hardening.yaml

@@ -4,6 +4,8 @@ kind: EnvoyFilter
 metadata:
   name: ingressgateway-hardening
   namespace: {{ .Release.Namespace }}
+  labels:
+{{ include "kubezero-lib.labels" . | indent 4 }}
 spec:
   configPatches:
   - applyTo: CLUSTER

charts/kubezero-istio-ingress/templates/envoyfilter-keepalive-nlb.yaml

@@ -4,6 +4,8 @@ kind: EnvoyFilter
 metadata:
   name: ingressgateway-listener-tcp-keepalive
   namespace: {{ .Release.Namespace }}
+  labels:
+{{ include "kubezero-lib.labels" . | indent 4 }}
 spec:
   configPatches:
   - applyTo: LISTENER

charts/kubezero-istio/update.sh

@@ -1,3 +1,6 @@
+### TODO
+- https://istio.io/latest/docs/ops/configuration/security/harden-docker-images/
+
 #!/bin/bash
 set -ex