Enable monitoring istio injection

Package Owner Merge Request

Package Changes

• enable istio-injection on monitoring namespace
• added prometheus sidecar config
• added containers to terminate istio-proxy when admissionWebhook job completes
• egress network policy to istio resources
• Istio AuthorizationPolicy for intra monitoring namespace communications (previously were being protected by authservice)
• Istio AuthorizationPolicy for Kiali to prometheus communications

BigBang Changes

• Removing virtualservice values for monitoring package to not point to haproxy, but reverting back to the normal istio-injected prometheus/alertmanager services.
• Added authservice as monitoring HelmRelease dependency

Links to all MRs that are associated with this change are required.

• https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/74
• https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/80
• https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/85
• https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/merge_requests/88

Additional Details

Closes https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/issues/23

Closes https://repo1.dso.mil/platform-one/big-bang/apps/core/monitoring/-/issues/48

Closes #872 (closed)

Add any labels for affected packages so that they are deployed in CI. See example:

Once the MR is ready for review also add the status::review label.

chart/templates/monitoring/values.yaml

@@ -25,20 +25,10 @@ istio:
   enabled: {{ .Values.istio.enabled }}
   prometheus:
     enabled: true
-    {{- if .Values.monitoring.sso.enabled }}
-    service: authservice-haproxy-sso
-    port: 8080
-    namespace: authservice
-    {{- end }}
     gateways:
     - istio-system/{{ default "public" .Values.monitoring.ingress.gateway }}
   alertmanager:
     enabled: true
-    {{- if .Values.monitoring.sso.enabled }}
-    service: authservice-haproxy-sso
-    port: 8080
-    namespace: authservice
-    {{- end }}
     gateways:
     - istio-system/{{ default "public" .Values.monitoring.ingress.gateway }}
   grafana:
@@ -46,6 +36,23 @@ istio:
     gateways:
     - istio-system/{{ default "public" .Values.monitoring.ingress.gateway }}
 
+{{- if .Values.monitoring.sso.enabled }}
+alertmanager:
+  alertmanagerSpec:
+    {{- $alertmanagerAuthserviceKey := (dig "selector" "key" "protect" .Values.addons.authservice.values) }}
+    {{- $alertmanagerAuthserviceValue := (dig "selector" "value" "keycloak" .Values.addons.authservice.values) }}
+    podMetadata:
+      labels:
+        {{ $alertmanagerAuthserviceKey }}: {{ $alertmanagerAuthserviceValue }}
+prometheus:
+  prometheusSpec:
+    {{- $prometheusAuthserviceKey := (dig "selector" "key" "protect" .Values.addons.authservice.values) }}
+    {{- $prometheusAuthserviceValue := (dig "selector" "value" "keycloak" .Values.addons.authservice.values) }}
+    podMetadata:
+      labels:
+        {{ $prometheusAuthserviceKey }}: {{ $prometheusAuthserviceValue }}
+{{- end }}
+
 anchore:
   enabled: {{ .Values.addons.anchore.enabled }}