From f690a1264d36f768ad52c31b22eb8f9b814f945f Mon Sep 17 00:00:00 2001
From: Danijel Simeunovic <danijel.simeunovic@trumf.no>
Date: Sun, 8 Feb 2026 10:45:04 +0100
Subject: [PATCH] remove istio ref

---
 README.md                                  |  4 ----
 argocd/infra/cert-manager-application.yaml | 10 ----------
 2 files changed, 14 deletions(-)

diff --git a/README.md b/README.md
index d813b86..4623216 100644
--- a/README.md
+++ b/README.md
@@ -55,10 +55,6 @@ This is a **Kubernetes cluster bootstrapping and GitOps configuration repository
 - Only secrets labeled `allowedToBeCloned: "true"` are cloned
 - Syncing happens automatically via `synchronize: true` in the policy
 
-### Istio Integration
-- Cert-Manager and webhooks disable Istio sidecar injection (`sidecar.istio.io/inject: "false"`) to avoid mTLS conflicts
-- Indicates the cluster likely has Istio installed for service mesh capabilities
-
 ### Network Configuration
 - ArgoCD UI: `argocd.127.0.0.1.nip.io` (local development)
 - Server runs in insecure mode (`--insecure`, `--disable-auth`) - suitable for local/dev clusters
diff --git a/argocd/infra/cert-manager-application.yaml b/argocd/infra/cert-manager-application.yaml
index f6443c0..a740d2e 100644
--- a/argocd/infra/cert-manager-application.yaml
+++ b/argocd/infra/cert-manager-application.yaml
@@ -32,21 +32,11 @@ spec:
           enabled: true
           replicaCount: 1
           timeoutSeconds: 10
-          # Disable Istio sidecar injection for webhook to avoid mTLS issues
-          podAnnotations:
-            sidecar.istio.io/inject: "false"
 
         # CA Injector
         caInjector:
           enabled: true
           replicaCount: 1
-          # Disable Istio sidecar injection for CA injector
-          podAnnotations:
-            sidecar.istio.io/inject: "false"
-
-        # Disable Istio sidecar for main controller pods
-        podAnnotations:
-          sidecar.istio.io/inject: "false"
 
         # Security context
         podSecurityPolicy: