Enabling strict mTLS across the mesh does not enable strict mode #28869

Which section(s) is the issue in?

Enabling strict mTLS across the mesh
https://docs.openshift.com/container-platform/4.6/service_mesh/v2x/ossm-security.html#ossm-security-enabling-strict-mtls_ossm-security

The docs says "Enabling strict mTLS" by setting spec.security.controlPlane.mtls to true in your ServiceMeshControlPlane resource. But it enables permissive mode not strict mode.

What needs fixing?

Edit PeerAuthentication in the namespace where SMCP is deployed.

apiVersion: security.istio.io/v1beta1
kind: PeerAuthentication
metadata:
  name: default
  namespace: <NAMESPACE where SMCP is deployed>
spec:
  mtls:
   mode: STRICT