Istio integration

The operator wrapper uses the bb-common subchart rather than a package-specific istio.hardened.enabled API. Put wrapper mesh settings under packages.eckOperator.values.bb-common.istio when using the umbrella’s packageConfiguration.version: v1 interface, or bb-common.istio for standalone package Helm use. The umbrella translates its compatibility/global hardening inputs into the current shared settings.

See the operator webhook and service-mesh requirements before overriding these settings. In particular, preserve the webhook’s inbound 9443 sidecar exclusion and its STRICT-mode port-level mTLS exception. Package values do not independently enroll standalone pods in the mesh.

The shared bb-common Istio guide owns the complete shared configuration contract. Operator-specific overrides are in package values.