Allow setting minProtocolVersion on istio gateways

chart/templates/istio/values.yaml

@@ -121,6 +121,10 @@ gateways:
         {{- if or (eq $tlsMode "SIMPLE") (eq $tlsMode "MUTUAL") }}
         credentialName: {{ $index }}-{{ $name }}-cert
         {{- end }}
+        {{- $tlsMinVersion := (dig "tls" "minProtocolVersion" "" $values) }}
+        {{- if $tlsMinVersion }}
+        minProtocolVersion: {{ $tlsMinVersion }}
+        {{- end }}
       {{- end }}
     {{- else if ($values.ports) }}
     {{- range $values.ports }}
@@ -134,6 +138,10 @@ gateways:
         {{- if or (eq $tlsMode "SIMPLE") (eq $tlsMode "MUTUAL") }}
         credentialName: {{ $name }}-cert
         {{- end }}
+        {{- $tlsMinVersion := (dig "tls" "minProtocolVersion" "" $values) }}
+        {{- if $tlsMinVersion }}
+        minProtocolVersion: {{ $tlsMinVersion }}
+        {{- end }}
     {{- end }}
     {{- else }}
     - hosts:
@@ -148,6 +156,10 @@ gateways:
         {{- if or (eq $tlsMode "SIMPLE") (eq $tlsMode "MUTUAL") }}
         credentialName: {{ $name }}-cert
         {{- end }}
+        {{- $tlsMinVersion := (dig "tls" "minProtocolVersion" "" $values) }}
+        {{- if $tlsMinVersion }}
+        minProtocolVersion: {{ $tlsMinVersion }}
+        {{- end }}
     {{- end }}
     {{- end }}
 

chart/values.yaml

@@ -206,6 +206,7 @@ istio:
       tls:
         key: ""
         cert: ""
+        minProtocolVersion: ""
     # private:
     #   ingressGateway: "private-ingressgateway"
     #   hosts:
@@ -223,6 +224,7 @@ istio:
     #   tls:
     #     key: ""
     #     cert: ""
+    #     minProtocolVersion: ""
     # passthrough:
     #   ingressGateway: "passthrough-ingressgateway"
     #   hosts:
@@ -245,6 +247,7 @@ istio:
     #     tls:
     #       key: ""
     #       cert: ""
+    #       minProtocolVersion: ""
     #   - hosts:
     #     - "example.bigbang.dev"
     #     port:
@@ -257,6 +260,7 @@ istio:
     #     tls:
     #       key: ""
     #       cert: ""
+    #       minProtocolVersion: ""
     # passthrough:
     #   ingressGateway: "passthrough-ingressgateway"
     #   hosts: