Turn on control plane security for sds (istio#584)

sdake · Nov 11, 2019 · 1d64e69 · 1d64e69
1 parent c6b613c
commit 1d64e69
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 4 deletions.
diff --git a/cmd/mesh/testdata/profile-dump/output/sds_policy_off.yaml b/cmd/mesh/testdata/profile-dump/output/sds_policy_off.yaml
@@ -314,7 +314,7 @@ values:
       s390x: 2
     certificates: []
     configValidation: true
-    controlPlaneSecurityEnabled: false
+    controlPlaneSecurityEnabled: true
     defaultNodeSelector: {}
     defaultPodDisruptionBudget:
       enabled: true

diff --git a/data/profiles/sds.yaml b/data/profiles/sds.yaml
@@ -7,7 +7,7 @@ spec:
         enabled: true
   values:
     global:
-      controlPlaneSecurityEnabled: false
+      controlPlaneSecurityEnabled: true
       mtls:
         enabled: true
       sds:

diff --git a/pkg/vfs/assets.gen.go b/pkg/vfs/assets.gen.go
diff --git a/tests/profiles/helm/values-istio-sds.yaml b/tests/profiles/helm/values-istio-sds.yaml
@@ -5,7 +5,7 @@ global:
   telemetryNamespace: istio-system
   policyNamespace: istio-system
 
-  controlPlaneSecurityEnabled: false
+  controlPlaneSecurityEnabled: true
 
   mtls:
     # Default setting for service-to-service mtls. Can be set explicitly using