Enabling strict mTLS across the mesh does not enable strict mode #28869
Description
Which section(s) is the issue in?
Enabling strict mTLS across the mesh
https://docs.openshift.com/container-platform/4.6/service_mesh/v2x/ossm-security.html#ossm-security-enabling-strict-mtls_ossm-security
The docs says "Enabling strict mTLS" by setting spec.security.controlPlane.mtls to true in your ServiceMeshControlPlane resource. But it enables permissive mode not strict mode.
What needs fixing?
Edit PeerAuthentication in the namespace where SMCP is deployed.
apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
name: default
namespace: <NAMESPACE where SMCP is deployed>
spec:
mtls:
mode: STRICT