Modifying EKS Pipeline values for vault install

chart/values.yaml

@@ -162,11 +162,11 @@ istio:
   git:
     repo: https://repo1.dso.mil/big-bang/product/packages/istio-controlplane.git
     path: "./chart"
-    tag: "1.18.2-bb.0"
+    tag: "1.18.2-bb.1"
   helmRepo:
     repoName: "registry1"
     chartName: "istio"
-    tag: "1.18.2-bb.0"
+    tag: "1.18.2-bb.1"
 
   # -- Tetrate Istio Distribution - Tetrate provides FIPs verified Istio and Envoy software and support,
   # validated through the FIPs Boring Crypto module. Find out more from Tetrate - https://www.tetrate.io/tetrate-istio-subscription
@@ -1757,12 +1757,12 @@ addons:
     git:
       repo: https://repo1.dso.mil/big-bang/product/packages/vault.git
       path: "./chart"
-      tag: "0.24.1-bb.1"
+      tag: "0.24.1-bb.3"
     helmRepo:
       repoName: "registry1"
       chartName: "vault"
-      tag: "0.24.1-bb.1"
-
+      tag: "0.24.1-bb.3"
+      
     # -- Flux reconciliation overrides specifically for the Vault Package
     flux: {}
 

tests/eks-test-values.yaml

@@ -5,14 +5,17 @@ networkPolicies:
 
 istio:
   values:
-    values:
-      global: 
-        proxy:
-          resources:
-            requests:
-              cpu: 100m
-              memory: 256Mi
-            limits: null
+    global: 
+      proxy:
+        resources:
+          requests:
+            cpu: 100m
+            memory: 256Mi
+          limits: null
+    defaultConfig:
+      proxyMetadata:
+        ISTIO_META_DNS_CAPTURE: "true"
+        ISTIO_META_DNS_AUTO_ALLOCATE: "true"
 
 neuvector:
   values:
@@ -105,12 +108,17 @@ monitoring:
   values:
     prometheus:
       prometheusSpec:
-        # additionalScrapeConfigs: []
-        # podMetadata:
-        #   annotations:
-        #     vault.hashicorp.com/agent-inject: "false"
-        #     vault.hashicorp.com/agent-init-first: "false"
-        #     vault.hashicorp.com/agent-inject-token: "false"
+        additionalScrapeConfigs: []
+        podMetadata:
+          annotations:
+            vault.hashicorp.com/agent-inject: "false"
+            vault.hashicorp.com/agent-init-first: "true"
+            vault.hashicorp.com/agent-inject-token: "true"
+            vault.hashicorp.com/role: "prometheus"
+            vault.hashicorp.com/agent-pre-populate: "false"
+            proxy.istio.io/config: |
+              holdApplicationUntilProxyStarts: true
+   
         resources:
           requests:
             cpu: 300m
@@ -483,3 +491,4 @@ addons:
           cpu: 100m
           memory: 256Mi
         limits: null
+