Update Sidecars to 1.13.3

Author: github-actions[bot]

apps/backend/deployment.patch.yaml

@@ -1,80 +1,33 @@
 - op: add
-  path: /status
-  value: {}
+  path: /metadata/creationTimestamp
+  value: null
 - op: add
-  path: /spec/template/spec/securityContext
-  value:
-    fsGroup: 1337
+  path: /spec/template/metadata/annotations/kubectl.kubernetes.io~1default-container
+  value: backend
 - op: add
-  path: /spec/template/spec/volumes
-  value:
-    - emptyDir:
-        medium: Memory
-      name: istio-envoy
-    - emptyDir: {}
-      name: istio-data
-    - downwardAPI:
-        items:
-          - fieldRef:
-              fieldPath: metadata.labels
-            path: labels
-          - fieldRef:
-              fieldPath: metadata.annotations
-            path: annotations
-      name: istio-podinfo
-    - name: istio-token
-      projected:
-        sources:
-          - serviceAccountToken:
-              audience: istio-ca
-              expirationSeconds: 43200
-              path: istio-token
-    - configMap:
-        name: istio-ca-root-cert
-      name: istiod-ca-cert
+  path: /spec/template/metadata/annotations/kubectl.kubernetes.io~1default-logs-container
+  value: backend
 - op: add
-  path: /spec/template/spec/initContainers
-  value:
-    - args:
-        - istio-iptables
-        - -p
-        - "15001"
-        - -z
-        - "15006"
-        - -u
-        - "1337"
-        - -m
-        - REDIRECT
-        - -i
-        - '*'
-        - -x
-        - ""
-        - -b
-        - '*'
-        - -d
-        - 15090,15021,15020
-      image: docker.io/istio/proxyv2:1.13.3
-      name: istio-init
-      resources:
-        limits:
-          cpu: "2"
-          memory: 1Gi
-        requests:
-          cpu: 10m
-          memory: 16Mi
-      securityContext:
-        allowPrivilegeEscalation: false
-        capabilities:
-          add:
-            - NET_ADMIN
-            - NET_RAW
-          drop:
-            - ALL
-        privileged: false
-        readOnlyRootFilesystem: false
-        runAsGroup: 0
-        runAsNonRoot: false
-        runAsUser: 0
+  path: /spec/template/metadata/annotations/prometheus.io~1path
+  value: /stats/prometheus
+- op: add
+  path: /spec/template/metadata/annotations/prometheus.io~1port
+  value: "15020"
+- op: add
+  path: /spec/template/metadata/annotations/sidecar.istio.io~1status
+  value: '{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-envoy","istio-data","istio-podinfo","istio-token","istiod-ca-cert"],"imagePullSecrets":null,"revision":"default"}'
+- op: add
+  path: /spec/template/metadata/creationTimestamp
+  value: null
+- op: add
+  path: /spec/template/metadata/labels/security.istio.io~1tlsMode
+  value: istio
+- op: add
+  path: /spec/template/metadata/labels/service.istio.io~1canonical-name
+  value: backend
+- op: add
+  path: /spec/template/metadata/labels/service.istio.io~1canonical-revision
+  value: latest
 - op: replace
   path: /spec/template/spec/containers/0/resources/limits/cpu
   value: "2"
@@ -185,32 +138,79 @@
       - mountPath: /etc/istio/pod
         name: istio-podinfo
 - op: add
-  path: /spec/template/metadata/creationTimestamp
-  value: null
-- op: add
-  path: /spec/template/metadata/labels/security.istio.io~1tlsMode
-  value: istio
-- op: add
-  path: /spec/template/metadata/labels/service.istio.io~1canonical-name
-  value: backend
-- op: add
-  path: /spec/template/metadata/labels/service.istio.io~1canonical-revision
-  value: latest
-- op: add
-  path: /spec/template/metadata/annotations/kubectl.kubernetes.io~1default-logs-container
-  value: backend
-- op: add
-  path: /spec/template/metadata/annotations/sidecar.istio.io~1status
-  value: '{"initContainers":["istio-init"],"containers":["istio-proxy"],"volumes":["istio-envoy","istio-data","istio-podinfo","istio-token","istiod-ca-cert"],"imagePullSecrets":null,"revision":"default"}'
-- op: add
-  path: /spec/template/metadata/annotations/prometheus.io~1path
-  value: /stats/prometheus
+  path: /spec/template/spec/initContainers
+  value:
+    - args:
+        - istio-iptables
+        - -p
+        - "15001"
+        - -z
+        - "15006"
+        - -u
+        - "1337"
+        - -m
+        - REDIRECT
+        - -i
+        - '*'
+        - -x
+        - ""
+        - -b
+        - '*'
+        - -d
+        - 15090,15021,15020
+      image: docker.io/istio/proxyv2:1.13.3
+      name: istio-init
+      resources:
+        limits:
+          cpu: "2"
+          memory: 1Gi
+        requests:
+          cpu: 10m
+          memory: 16Mi
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities:
+          add:
+            - NET_ADMIN
+            - NET_RAW
+          drop:
+            - ALL
+        privileged: false
+        readOnlyRootFilesystem: false
+        runAsGroup: 0
+        runAsNonRoot: false
+        runAsUser: 0
 - op: add
-  path: /spec/template/metadata/annotations/prometheus.io~1port
-  value: "15020"
+  path: /spec/template/spec/securityContext
+  value:
+    fsGroup: 1337
 - op: add
-  path: /spec/template/metadata/annotations/kubectl.kubernetes.io~1default-container
-  value: backend
+  path: /spec/template/spec/volumes
+  value:
+    - emptyDir:
+        medium: Memory
+      name: istio-envoy
+    - emptyDir: {}
+      name: istio-data
+    - downwardAPI:
+        items:
+          - fieldRef:
+              fieldPath: metadata.labels
+            path: labels
+          - fieldRef:
+              fieldPath: metadata.annotations
+            path: annotations
+      name: istio-podinfo
+    - name: istio-token
+      projected:
+        sources:
+          - serviceAccountToken:
+              audience: istio-ca
+              expirationSeconds: 43200
+              path: istio-token
+    - configMap:
+        name: istio-ca-root-cert
+      name: istiod-ca-cert
 - op: add
-  path: /metadata/creationTimestamp
-  value: null
+  path: /status
+  value: {}