Merge branch 'istio-129' into 'master'

Istio: Disable FSGroup modification by default

See merge request platform-one/big-bang/bigbang!2037

chart/templates/istio/controlplane/values.yaml

@@ -9,6 +9,13 @@ domain: {{ $domainName }}
 
 enterprise: {{ .Values.istio.enterprise }}
 
+{{- if not (semverCompare "<1.19" .Capabilities.KubeVersion.GitVersion) }}
+istiod:
+  env: 
+    - name: ENABLE_LEGACY_FSGROUP_INJECTION
+      value: "false"
+{{- end }}
+
 {{- if or .Values.jaeger.enabled .Values.tempo.enabled }}
 tracing:
 {{- if .Values.jaeger.enabled }}

chart/values.yaml

@@ -128,7 +128,7 @@ istio:
   git:
     repo: https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git
     path: "./chart"
-    tag: "1.14.3-bb.3"
+    tag: "1.14.3-bb.4"
 
   # -- Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support,
   # validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription