Anchore metrics mtls

Package Merge Request

Package Changes

• Added support for metrics mTLS
• upgraded the Redis sub chart to get support for metrics mTLS

Package MR

https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise/-/merge_requests/131

For Issue

Closes https://repo1.dso.mil/platform-one/big-bang/apps/security-tools/anchore-enterprise/-/issues/78

chart/templates/anchore/values.yaml

@@ -19,6 +19,19 @@ istio:
 
 monitoring:
   enabled: {{ .Values.monitoring.enabled }}
+  {{- if .Values.monitoring.enabled }}
+  {{- if and .Values.istio.enabled (eq (dig "istio" "injection" "enabled" .Values.addons.anchore) "enabled") }}
+  {{- if dig "values" "istio" "mtls" "mode" "STRICT" .Values.addons.anchore }}
+  serviceMonitor:
+    scheme: "https"
+    tlsConfig:
+      caFile: /etc/prom-certs/root-cert.pem
+      certFile: /etc/prom-certs/cert-chain.pem
+      keyFile: /etc/prom-certs/key.pem
+      insecureSkipVerify: true
+  {{- end }}
+  {{- end }}
+  {{- end }}
 
 networkPolicies:
   enabled: {{ .Values.networkPolicies.enabled }}
@@ -122,6 +135,16 @@ ui-redis:
       selector:
         app.kubernetes.io/name: anchore-ui-redis
         app.kubernetes.io/instance: anchore
+      {{- if and .Values.istio.enabled (eq (dig "istio" "injection" "enabled" .Values.addons.anchore) "enabled") }}
+      {{- if dig "values" "istio" "mtls" "mode" "STRICT" .Values.addons.anchore }}
+      scheme: "https"
+      tlsConfig:
+        caFile: /etc/prom-certs/root-cert.pem
+        certFile: /etc/prom-certs/cert-chain.pem
+        keyFile: /etc/prom-certs/key.pem
+        insecureSkipVerify: true
+      {{- end }}
+      {{- end }}
     prometheusRule:
       enabled: true
       namespace: monitoring