Enable mTLS for Neuvector metrics

Package Merge Request

Package Changes

Adds ServiceMonitor config for Neuvector Remove override of mTLS

Package MR

big-bang/product/packages/neuvector!27 (merged)

For Issue

Closes big-bang/product/packages/neuvector#38 (closed)

changed milestone to %1.56.0

assigned to @brettcharrier

added 1 commit

• a3cb7e04 - uncessary if

Compare with previous version

added statusreview label

Also moving this one to statusdoing since it depends on big-bang/product/packages/neuvector!27 (diffs)

added statusdoing label and removed statusreview label

resolved all threads

added 1 commit

• 34d14a6d - moved mtls STRICT

Compare with previous version

added 1 commit

• 79146193 - read comments first

Compare with previous version

resolved all threads

added 1 commit

• 3e98ebc8 - Apply 1 suggestion(s) to 1 file(s)

Compare with previous version

added 1 commit

• a878eab5 - Update chart/values.yaml

Compare with previous version

approved this merge request

resolved all threads

added 1 commit

• d0e65b9c - Apply 1 suggestion(s) to 1 file(s)

Compare with previous version

added statusreview label and removed statusdoing label

added neuvector label

requested review from @ryan.j.garcia and @rob.ferguson

Was testing with neuvector and monitoring/metrics for 2.0 stuff and encountered istio mTLS issues so wanted to test and see it all together and I'm getting these errors:

❯ kubectl logs -n neuvector neuvector-prometheus-exporter-pod-d554bcf99-rlxrd
Login to controller ... HTTPSConnectionPool(host='neuvector-svc-controller', port=10443): Max retries exceeded with url: /v1/auth (Caused by NewConnectionError
('<urllib3.connection.HTTPSConnection object at 0x7ff4770115d0>: Failed to establish a new connection: [Errno -2] Name or service not known'))

And a HTTP/503 in prometheus/targets

resolved all threads

approved this merge request

merged

mentioned in commit 4c2a5315