Add ambient istio egress functionality

General MR

Summary

• Adds egress gateway package
• Add documentation for egress gateway package

Relevant logs/screenshots

egress waypoint logs after Gitlab Helm Test

Linked Issue

issue

Upgrade Notices

New: Istio Egress Gateway (Alpha)

This release adds an alpha istio-egress-gateway package: a shared egress waypoint for ambient mode that gives packages a single, default-deny egress point.

Disabled by default — no action required on upgrade. To try it (requires istio.ambient.enabled: true):

istio:
  ambient:
    enabled: true
  egressGateway:
    enabled: true


addons:
  gitlab:
    enabled: true
    values:
      # Configure gitlab to use egress waypoint, in future releases
      # this will be the default if egressGateway is enabled.
      routes:
        defaults:
          outbound:
            egressGateway: istio-egress/egress-waypoint

Alpha: values and package coverage may change between releases. See Configuring an Egress Gateway.