UNCLASSIFIED - NO CUI

Skip to content
Snippets Groups Projects

Resolve "Add istio mTLS for ESO"

Merged Resolve "Add istio mTLS for ESO"
10-add-istio-auth-policy into main
Merged Sam Vongsay requested to merge 10-add-istio-auth-policy into main

General MR

Summary

Deployed with istio, permissions are set to PERMISSIVE. This needs to be set to STRICT, unless it breaks functionality.

Relevant logs/screenshots

Example test override:

istio:
  enabled: true
packages:
  externalSecrets:
    enabled: true
    git:
      repo: https://repo1.dso.mil/big-bang/apps/sandbox/external-secrets
      tag: null
      branch: 10-add-istio-auth-policy
      path: chart
    values:
      bbtests:
        enabled: true
      istio:
        enabled: true
        mtls:
        # Available value PERMISSIVE or STRICT
          mode: STRICT

Linked Issue

issue

Upgrade Notices

  • Added istio mTLS policies
  • Enable helm test with istio enabled

Closes #10 (closed)

Edited by Daniel Chen

Merge request reports

Merge request pipeline #3389424 passed with warnings

Stage: ⚙️ configuration validation
Stage: 🤞 package tests

Merge request pipeline passed with warnings for 72aebfa2

Merged by Jacob KershawJacob Kershaw 10 months ago (Jun 25, 2024 2:03pm UTC)

Loading

Pipeline #3412650 passed with warnings

Stage: ⚙️ configuration validation
Stage: 🤞 package tests
Stage: 🏷️ tag

Pipeline passed with warnings for 91954fec on main

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
Please register or sign in to reply

UNCLASSIFIED - NO CUI