fix: istiod and istio-base drift detection on webhooks always trigger

Signed-off-by: Michael Fornaro <[email protected]>

Author: xunholy

kubernetes/apps/base/istio-system/istio-base/app/helmrelease.yaml

@@ -41,3 +41,14 @@ spec:
   driftDetection:
     mode: warn
   maxHistory: 3
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              version: v1
+              kind: ValidatingWebhookConfiguration
+              name: istiod-default-validator
+            patch: |
+              - op: add
+                path: /metadata/annotations/helm.toolkit.fluxcd.io~1driftDetection
+                value: disabled

kubernetes/apps/base/istio-system/istiod/app/helmrelease.yaml

@@ -76,3 +76,14 @@ spec:
                 "x-auth-request-access-token",
               ]
             headersToDownstreamOnDeny: ["content-type", "set-cookie"]
+  postRenderers:
+    - kustomize:
+        patches:
+          - target:
+              version: v1
+              kind: ValidatingWebhookConfiguration
+              name: istio-validator-istio-system
+            patch: |
+              - op: add
+                path: /metadata/annotations/helm.toolkit.fluxcd.io~1driftDetection
+                value: disabled