feat: complete ambient mode support with HTTPRoute fixes

  - Fix HTTPRoute hostname validation (*.kubeflow.local to kubeflow.local)
  - Add ambient mode CLI arguments to manager container
  - Disable sidecar injection for ambient deployments
  - Separate KFAM and manager container arguments
  - Add SERVICE_MESH_MODE environment variable support

Signed-off-by: madmecodes <[email protected]>

Author: madmecodes

components/profile-controller/config/overlays/kubeflow-ambient/httproute.yaml

@@ -7,7 +7,7 @@ spec:
   - name: kubeflow-gateway
     namespace: istio-system
   hostnames:
-  - "*.kubeflow.local"
+  - "kubeflow.local"
   rules:
   - matches:
     - path:
@@ -26,5 +26,5 @@ spec:
           replacePrefixMatch: /kfam/
     backendRefs:
     - name: profiles-kfam
-      namespace: $(PROFILES_NAMESPACE)
+      namespace: kubeflow
       port: 8081

components/profile-controller/config/overlays/kubeflow-ambient/patches/manager.yaml

@@ -4,9 +4,20 @@ metadata:
   name: deployment
 spec:
   template:
+    metadata:
+      labels:
+        sidecar.istio.io/inject: "false"
     spec:
       containers:
       - name: manager
+        command:
+        - /manager
+        - -userid-header
+        - $(USERID_HEADER)
+        - -userid-prefix
+        - $(USERID_PREFIX)
+        - -workload-identity
+        - $(WORKLOAD_IDENTITY)
         env:
         - name: SERVICE_MESH_MODE
           value: istio-ambient