Merge branch 'update-neuvector-tag-2.4.2-bb.1' into 'master'

neuvector update to 2.4.2-bb.1

Closes big-bang/product/packages/neuvector#20

See merge request !2558

chart/templates/neuvector/namespace.yaml

@@ -8,6 +8,6 @@ metadata:
     app.kubernetes.io/component: "sandbox"
     {{- include "commonLabels" . | nindent 4}}
     {{- if .Values.istio.enabled }}
-    istio-injection: "disabled"
+    istio-injection: {{ dig "istio" "injection" "enabled" .Values.neuvector }}
     {{- end }}
 {{- end }}
\ No newline at end of file

chart/templates/neuvector/values.yaml

@@ -7,11 +7,16 @@ domain: {{ default .Values.domain .Values.hostname }}
 
 openshift: {{ .Values.openshift }}
 
+{{ $istioInjection := (and .Values.istio.enabled (eq (dig "istio" "injection" "enabled" .Values.neuvector) "enabled")) }}
+
 istio:
   enabled: {{ .Values.istio.enabled }}
   neuvector:
     gateways:
     - istio-system/{{ default "public" .Values.neuvector.ingress.gateway }}
+  injection: {{ ternary "enabled" "disabled" $istioInjection }}
+  mtls:
+    mode: PERMISSIVE
 
 {{- if .Values.monitoring.enabled }}
 monitoring:

chart/values.yaml

@@ -590,7 +590,7 @@ neuvector:
   git:
     repo: https://repo1.dso.mil/platform-one/big-bang/apps/sandbox/neuvector.git
     path: "./chart"
-    tag: "2.4.2-bb.0"
+    tag: "2.4.2-bb.1"
 
   # -- Redirect the package ingress to a specific Istio Gateway (listed in `istio.gateways`).  The default is "public".
   ingress: