Route allowed TLS passthrough alongside egress interception

Add the TLS listener and dynamic TCP backend required by agentgateway when an actor policy selects passthrough. Keep the Helm chart and MITM Kustomize component aligned.

Signed-off-by: Eitan Yarmush <eitan.yarmush@solo.io>

Author: EItanya

charts/substrate/templates/atenet-egress.yaml

@@ -83,6 +83,11 @@ data:
                       cert: /run/podidentity.podcert.ate.dev/credential-bundle.pem
                       key: /run/podidentity.podcert.ate.dev/credential-bundle.pem
                       root: /run/servicedns.podcert.ate.dev/trust-bundle.pem
+      - protocol: TLS
+        hostname: "*"
+        tcpRoutes:
+        - backends:
+          - dynamic: {}
       - protocol: HTTP
         routes:
         - backends:

manifests/ate-install/components/agentgateway-egress-mitm/kustomization.yaml

@@ -81,6 +81,11 @@ patches:
                             cert: /run/podidentity.podcert.ate.dev/credential-bundle.pem
                             key: /run/podidentity.podcert.ate.dev/credential-bundle.pem
                             root: /run/servicedns-ca/trust-bundle.pem
+            - protocol: TLS
+              hostname: "*"
+              tcpRoutes:
+              - backends:
+                - dynamic: {}
             - protocol: HTTP
               routes:
               - backends: