Resolve "Add istio mTLS for ESO"

General MR

Summary

Deployed with istio, permissions are set to PERMISSIVE. This needs to be set to STRICT, unless it breaks functionality.

Relevant logs/screenshots

Example test override:

istio:
  enabled: true
packages:
  externalSecrets:
    enabled: true
    git:
      repo: https://repo1.dso.mil/big-bang/apps/sandbox/external-secrets
      tag: null
      branch: 10-add-istio-auth-policy
      path: chart
    values:
      bbtests:
        enabled: true
      istio:
        enabled: true
        mtls:
        # Available value PERMISSIVE or STRICT
          mode: STRICT

Linked Issue

issue

Upgrade Notices

• Added istio mTLS policies
• Enable helm test with istio enabled

Closes #10 (closed)

changed milestone to %2.29.0

added kindfeature priority5 teamStorage & Collaboration labels

assigned to @samvongsay

added 1 commit

• 107cf7d8 - Add exception

Compare with previous version

assigned to @dchen

added 1 commit

• 528f45a0 - Rename exception

Compare with previous version

added statusdoing label

changed title from Draft: Resolve "Add istio auth policies for ESO" to Draft: Resolve "Add istio mTLS for ESO"

added 11 commits

• a227066d - 1 earlier commit
• 4aef97b4 - Remove test
• 1bb29aed - Update test pod policy
• de841352 - Add another test hook policy
• 412903c1 - Readd test
• 5c010afb - Syntax fix
• 695aaf3c - Change restartPolicy to Always
• 8baedf38 - Fix pod stall
• c3896a96 - Readjust policy
• 5b4a13b3 - Removed exceptions
• da74fb4c - Reduce time

Compare with previous version

added 1 commit

• 8de90ca3 - Syntax test

Compare with previous version

added 1 commit

• c88f4276 - Add hook delete policy

Compare with previous version

added 1 commit

• 6a483705 - need to run sh instead of grep

Compare with previous version

added 1 commit

• 1870eb7d - fix syntax

Compare with previous version

added 1 commit

• 14db8df8 - update syntax

Compare with previous version

added 1 commit

• 93e1b485 - reduce sleep to test timeout

Compare with previous version

added 1 commit

• 26b1567b - adding back istio exception

Compare with previous version

added 2 commits

• d4f21692 - correct exception location
• 99dfb234 - update sleep timeout to 600 sec

Compare with previous version

added 1 commit

• d8f2200d - set exception to permissive

Compare with previous version

added 1 commit

• 55f085fd - add the delete policy hook

Compare with previous version

added 1 commit

• 737face2 - change sleep 300 to 120

Compare with previous version