1032: Enable Istio mTLS globally on istio-system namespace

chart/templates/istio/values.yaml

@@ -7,6 +7,9 @@
 {{- $domainName := default .Values.domain .Values.hostname }}
 domain: {{ $domainName }}
 
+mtls:
+  mode: {{ .Values.istio.mtls.mode }}
+
 enterprise: {{ .Values.istio.enterprise }}
 
 istiod:
@@ -189,4 +192,4 @@ k8s:
       name: tls
       nodePort: {{ add .nodePortBase 3 }}
     {{- end }}
-{{- end }}
\ No newline at end of file
+{{- end }}

chart/values.schema.json

@@ -240,6 +240,9 @@
     "istio": {
       "properties": {
         "enabled": true,
+        "mtls": {
+          "type": "object"
+        },
         "sourceType": true,
         "git": true,
         "helmRepo": true,

chart/values.yaml

@@ -155,6 +155,10 @@ imagePullPolicy: IfNotPresent
 istio:
   # -- Toggle deployment of Istio.
   enabled: true
+  mtls:
+    # -- STRICT = Allow only mutual TLS traffic,
+    # PERMISSIVE = Allow both plain text and mutual TLS traffic
+    mode: STRICT
 
   # -- Choose source type of "git" or "helmRepo"
   sourceType: "git"