Merge branch 'hardcoded-wildcard-affects-http-to-https-redirects-with-istio-gateways' into 'master'

istio-control-plane http to https redirects

Closes platform-one/big-bang/apps/core/istio-controlplane#49 and platform-one/big-bang/apps/core/istio-controlplane#39

See merge request platform-one/big-bang/bigbang!968

chart/templates/istio/controlplane/values.yaml

@@ -47,6 +47,8 @@ gateways:
   {{ $name | nindent 2 }}:
     selector:
       app: {{ $values.ingressGateway }}
+    autoHttpRedirect:
+      enabled: {{ dig "autoHttpRedirect" "enabled" "true" $values }}
     servers:
     - hosts:
       {{ tpl ($values.hosts | default (list) | toYaml) $ | nindent 8 }}

chart/values.yaml

@@ -118,7 +118,7 @@ istio:
   git:
     repo: https://repo1.dso.mil/platform-one/big-bang/apps/core/istio-controlplane.git
     path: "./chart"
-    tag: "1.11.2-bb.0"
+    tag: "1.11.2-bb.1"
 
   # Ingress gateways are created based on the key name.  Adding more keys will add ingress gateways.
   # Ingress gateways are setup in a Horizontal Pod Autoscaler with 1 to 5 replicas
@@ -148,6 +148,9 @@ istio:
       ingressGateway: "public-ingressgateway"
       hosts:
       - "*.{{ .Values.domain }}"
+      # -- Controls default HTTP/8080 server entry with HTTP to HTTPS Redirect.
+      autoHttpRedirect:
+        enabled: true
       tls:
         key: ""
         cert: ""
@@ -155,6 +158,9 @@ istio:
     #   ingressGateway: "private-ingressgateway"
     #   hosts:
     #   - "*.{{ .Values.domain }}"
+    #   # -- Controls default HTTP/8080 server entry with HTTP to HTTPS Redirect.
+    #   autoHttpRedirect:
+    #     enabled: true
     #   tls:
     #     key: ""
     #     cert: ""
@@ -162,6 +168,9 @@ istio:
     #   ingressGateway: "passthrough-ingressgateway"
     #   hosts:
     #   - "*.{{ .Values.domain }}"
+    #   # -- Controls default HTTP/8080 server entry with HTTP to HTTPS Redirect.
+    #   autoHttpRedirect:
+    #     enabled: true
     #   tls:
     #     mode: "PASSTHROUGH"