Merge branch '2209-fixing-monitoring-ns-hardening-consistency' into 'master'

attempting to harden velero

Closes #2035

See merge request !4877

chart/templates/velero/values.yaml

@@ -6,8 +6,13 @@
 
 istio:
   enabled: {{ .Values.istio.enabled }}
-  # hardened:
-  #   enabled: {{ or (dig "istio" "hardened" "enabled" false .Values.addons.velero.values) (dig "hardened" "enabled" false .Values.istio.values) }}
+  hardened:
+    enabled: {{ or
+      (dig "istio" "hardened" "enabled" false .Values.addons.velero.values)
+      (dig "hardened" "enabled" false .Values.istio.values)
+    }}
+
+domain: {{ .Values.domain }}
 
 {{- if .Values.istio.enabled }}
 podAnnotations:

chart/values.yaml

@@ -1742,11 +1742,11 @@ addons:
     git:
       repo: https://repo1.dso.mil/big-bang/product/packages/velero.git
       path: "./chart"
-      tag: "6.7.0-bb.7"
+      tag: "6.7.0-bb.8"
     helmRepo:
       repoName: "registry1"
       chartName: "velero"
-      tag: "6.7.0-bb.7"
+      tag: "6.7.0-bb.8"
 
     # -- Flux reconciliation overrides specifically for the Velero Package
     flux: {}

tests/test-values.yaml

@@ -2205,23 +2205,29 @@ addons:
             docker_host: "containers.dev.bigbang.mil"
 
   velero:
-    istio:
-      hardened:
-        enabled: true
-        customServiceEntries:
-          - name: "cypress-service-entries-velero"
-            enabled: true
-            spec:
-              hosts:
-                - 'registry.npmjs.org'
-                - 'download.cypress.io'
-                - 'cdn.cypress.io'
-                - 'repo1.dso.mil'
-
     enabled: false
     plugins:
     - aws
     values:
+      istio:
+        hardened:
+          customServiceEntries:
+            - name: "cypress-service-entries-velero"
+              enabled: true
+              spec:
+                hosts:
+                  - 'registry.npmjs.org'
+                  - 'download.cypress.io'
+                  - 'cdn.cypress.io'
+                  - 'repo1.dso.mil'
+                exportTo:
+                  - "."
+                location: MESH_EXTERNAL
+                ports:
+                  - number: 443
+                    protocol: TLS
+                    name: https
+                resolution: DNS
       serviceAccount:
         server:
           name: velero