testing cluster auditor values for mr 87

Package Merge Request

Enables hardening for clusterAuditor

Package Changes

Testing big-bang/product/packages/cluster-auditor#87 (closed) egress policies for cluster-auditor

Package MR

big-bang/product/packages/cluster-auditor#87 (closed) big-bang/product/packages/cluster-auditor!132 (merged)

For Issue

Closes big-bang/product/packages/cluster-auditor!132 (merged)

Upgrade Notices

N/A

added clusterAuditor kindfeature priority6 statusdoing teamSecurity & Compliance labels

assigned to @steven.donald

added 1 commit

• 8113ec77 - add serviceentries for bigbang test

Compare with previous version

added 1 commit

• 4a3a742b - bigbang testvalues for cluster auditor

Compare with previous version

mentioned in merge request big-bang/product/packages/cluster-auditor!132 (merged)

added 1 commit

• f13fed07 - neuvector test

Compare with previous version

added 1 commit

• 7b3a0911 - remove unneccessary dev test-values

Compare with previous version

marked this merge request as ready

removed statusdoing label

added statusreview label

added 1 commit

• c1cce7a4 - testing without euvector service entry

Compare with previous version

added 10 commits

• 606aa97d - version updates for release 2.23.1
• 082496c4 - loki update to 5.47.2-bb.0
• 01dce9e8 - gatekeeper update to 3.15.0-bb.3
• 527acfe8 - updating to 1.29.3
• 60139e30 - consolidate ServiceEntry kinds into a single entry per package
• 83f9709c - monitoring update to 57.2.0-bb.0
• b2b48151 - minio update to 5.0.12-bb.9
• 13eb1919 - istio update to 1.20.4-bb.1
• 71020443 - kiali update to 1.82.0-bb.1
• 08fe4140 - Patch to remove double-entries

Compare with previous version

added 1 commit

• 82d27fae - Clean out comments

Compare with previous version

added 1 commit

• c1ff5da4 - typo fix

Compare with previous version

added 20 commits

• c1ff5da4...3bc1331d - 20 commits from branch master

Compare with previous version

added 1 commit

• b70805a6 - Correct testing values for clusterAuditor and up to date

Compare with previous version

Overrides For Bigbang

clusterAuditor:
  enabled: true
  values:
    resources:
      requests:
        cpu: 100m
        memory: 256Mi
      limits: {}
    bbtests:
      enabled: true
      cypress:
        envs:
          cypress_grafana_url: 'https://grafana.dev.bigbang.mil'
          cypress_prometheus_url: 'https://prometheus.dev.bigbang.mil'
          cypress_url: 'https://grafana.dev.bigbang.mil/d/YBgRZG6Mz/opa-violations?orgId=1'
    podAnnotations:
      sidecar.istio.io/logLevel: debug
    istio:
      enabled: true
      hardened:
        enabled: true
        customServiceEntries:
          - name: "allow-npm-for-cypress-tests"
            enabled: true
            spec:
              hosts:
                - 'registry.npmjs.org'
                - 'download.cypress.io'
                - 'cdn.cypress.io'
              location: MESH_EXTERNAL
              ports:
                - number: 443
                  protocol: TLS
                  name: https
              resolution: DNS
          - name: "allow-repo1-for-cypress"
            enabled: true
            spec:
              hosts:
                - 'repo1.dso.mil'
              location: MESH_EXTERNAL
              ports:
                - number: 443
                  protocol: TLS
                  name: https
              resolution: DNS
          - name: "allow-grafana-for-cypress"
            enabled: true
            spec:
              hosts:
                - 'grafana.dev.bigbang.mil'
              location: MESH_EXTERNAL
              ports:
                - number: 443
                  protocol: TLS
                  name: https
              resolution: DNS
          - name: "allow-prometheus-for-cypress"
            enabled: true
            spec:
              hosts:
                - 'prometheus.dev.bigbang.mil'
              location: MESH_EXTERNAL
              ports:
                - number: 443
                  protocol: TLS
                  name: https
              resolution: DNS

requested review from @chris.oconnell, @ryan.thompson.44, @michaelmartin, and @ryan.j.garcia

@andrewshoell : You have been tagged in this merge request for the purpose of conducting secondary review.