Since we support net-istio + mTLS strict mode, we need to add e2e tests.

One problem is that OSSM does not support sidecar injection by namespace setting. Also rewriteAppHTTPProbers is not available by default or global configuration. See OSSM-443.

If we cannot add the annotations, we need to write some basic tests from scratch like:

• External access with TLS
• Service to Service internal access
• External/Internal access with sks's proxy mode vs servce mode.
• CustomDomain by domainmapping
• Private cluster-local service
• Traffic split

(probably there are some other tests also needed)