istiod_label_annotation.sh

#!/usr/bin/env bash

set -euxo pipefail

# pdb
kubectl label pdb istiod -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate pdb istiod -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# service account
kubectl label sa istiod -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate sa istiod -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# config map
kubectl label cm istio -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate cm istio -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label cm istio-sidecar-injector -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate cm istio-sidecar-injector -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# cluster role
kubectl label clusterrole istiod-clusterrole-istio-system app.kubernetes.io/managed-by=Helm
kubectl annotate clusterrole istiod-clusterrole-istio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label clusterrole istiod-gateway-controller-istio-system app.kubernetes.io/managed-by=Helm
kubectl annotate clusterrole istiod-gateway-controller-istio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label clusterrole istio-reader-clusterrole-istio-system app.kubernetes.io/managed-by=Helm
kubectl annotate clusterrole istio-reader-clusterrole-istio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# cluster role binding
kubectl label clusterrolebinding istiod-clusterrole-istio-system app.kubernetes.io/managed-by=Helm
kubectl annotate clusterrolebinding istiod-clusterrole-istio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label clusterrolebinding istiod-gateway-controller-istio-system app.kubernetes.io/managed-by=Helm
kubectl annotate clusterrolebinding istiod-gateway-controller-istio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label clusterrolebinding istio-reader-clusterrole-istio-system app.kubernetes.io/managed-by=Helm
kubectl annotate clusterrolebinding istio-reader-clusterrole-istio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# role
kubectl label role istiod -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate role istiod -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# role binding
kubectl label rolebinding istiod -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate rolebinding istiod -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# service
kubectl label svc istiod -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate svc istiod -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# deployment
kubectl label deploy istiod -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate deploy istiod -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# envoyfilter
kubectl label envoyfilter stats-filter-1.13 -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate envoyfilter stats-filter-1.13 -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label envoyfilter tcp-stats-filter-1.13 -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate envoyfilter tcp-stats-filter-1.13 -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label envoyfilter stats-filter-1.14 -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate envoyfilter stats-filter-1.14 -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label envoyfilter tcp-stats-filter-1.14 -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate envoyfilter tcp-stats-filter-1.14 -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label envoyfilter stats-filter-1.15 -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate envoyfilter stats-filter-1.15 -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

kubectl label envoyfilter tcp-stats-filter-1.15 -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate envoyfilter tcp-stats-filter-1.15 -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# mutating webhook configuration
kubectl label mutatingwebhookconfiguration istio-sidecar-injector app.kubernetes.io/managed-by=Helm
kubectl annotate mutatingwebhookconfiguration istio-sidecar-injector meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

# hpa
kubectl label hpa istiod -nistio-system app.kubernetes.io/managed-by=Helm
kubectl annotate hpa istiod -nistio-system meta.helm.sh/release-name=istiod meta.helm.sh/release-namespace=istio-system

set -euxo pipefail があると安心かもです！