I use deployment.yaml kind: Deployment and specify sidecar.istio.io/proxyCPU: "100m"
and other sidecar annotations in .spec.templace.metadata.annotations
. The problem is this requires me to repeat the same in every application and there are too many of them.
I understand there is a global MeshConfig in istio-system namespace where we can set these defaults but we are in a multi-tenant environment and objects in that namespaces are not in our control.
Is there a way to specify these defaults at the namespace levels so that when sidecars (istio-proxy) gets injected they alongside the app in the pod they get these defaults ?
Why kind: Sidecar
that is deployed for the mesh does not allow these annotations?
Is there a way to override the default MeshConfig somewhere single place rather than every deployment spec?