Add in removed tests (had regression failure) to verify fix (#8482)

* Add in removed tests (had regression failure) to verify fix

* Update test to redeploy istiod

content/en/docs/tasks/security/authorization/authz-td-migration/index.md

@@ -89,6 +89,12 @@ Notice that it may take tens of seconds for the authorization policy to be propa
     $ istioctl install --set profile=demo --set meshConfig.trustDomain=new-td
     {{< /text >}}
 
+1. Redeploy istiod to pick up the trust domain changes.
+
+    {{< text bash >}}
+    $ kubectl rollout restart deployment -n istio-system istiod
+    {{< /text >}}
+
     Istio mesh is now running with a new trust domain, `new-td`.
 
 1. Redeploy the `httpbin` and `sleep` applications to pick up changes from the new Istio control plane.

content/en/docs/tasks/security/authorization/authz-td-migration/snips.sh

@@ -78,26 +78,30 @@ istioctl install --set profile=demo --set meshConfig.trustDomain=new-td
 }
 
 snip_migrate_trust_domain_without_trust_domain_aliases_2() {
-kubectl delete pod --all
+kubectl rollout restart deployment -n istio-system istiod
 }
 
 snip_migrate_trust_domain_without_trust_domain_aliases_3() {
-kubectl delete pod --all -n sleep-allow
+kubectl delete pod --all
 }
 
 snip_migrate_trust_domain_without_trust_domain_aliases_4() {
+kubectl delete pod --all -n sleep-allow
+}
+
+snip_migrate_trust_domain_without_trust_domain_aliases_5() {
 kubectl exec "$(kubectl get pod -l app=sleep -o jsonpath={.items..metadata.name})" -c sleep -- curl http://httpbin.default:8000/ip -s -o /dev/null -w "%{http_code}\n"
 }
 
-! read -r -d '' snip_migrate_trust_domain_without_trust_domain_aliases_4_out <<\ENDSNIP
+! read -r -d '' snip_migrate_trust_domain_without_trust_domain_aliases_5_out <<\ENDSNIP
 403
 ENDSNIP
 
-snip_migrate_trust_domain_without_trust_domain_aliases_5() {
+snip_migrate_trust_domain_without_trust_domain_aliases_6() {
 kubectl exec "$(kubectl -n sleep-allow get pod -l app=sleep -o jsonpath={.items..metadata.name})" -c sleep -n sleep-allow -- curl http://httpbin.default:8000/ip -s -o /dev/null -w "%{http_code}\n"
 }
 
-! read -r -d '' snip_migrate_trust_domain_without_trust_domain_aliases_5_out <<\ENDSNIP
+! read -r -d '' snip_migrate_trust_domain_without_trust_domain_aliases_6_out <<\ENDSNIP
 403
 ENDSNIP
 

content/en/docs/tasks/security/authorization/authz-td-migration/test.sh

@@ -45,16 +45,17 @@ _verify_same snip_before_you_begin_5 "$snip_before_you_begin_5_out"
 
 echo y | snip_migrate_trust_domain_without_trust_domain_aliases_1
 
-_wait_for_deployment istio-system istiod
-
 snip_migrate_trust_domain_without_trust_domain_aliases_2
 
+_wait_for_deployment istio-system istiod
+
 snip_migrate_trust_domain_without_trust_domain_aliases_3
 
-# TODO need  to fix 503's - https://github.com/istio/istio.io/issues/8405 open for that.
-#_verify_same snip_migrate_trust_domain_without_trust_domain_aliases_4 "$snip_migrate_trust_domain_without_trust_domain_aliases_4_out"
+snip_migrate_trust_domain_without_trust_domain_aliases_4
 
-#_verify_same snip_migrate_trust_domain_without_trust_domain_aliases_5 "$snip_migrate_trust_domain_without_trust_domain_aliases_5_out"
+_verify_same snip_migrate_trust_domain_without_trust_domain_aliases_5 "$snip_migrate_trust_domain_without_trust_domain_aliases_5_out"
+
+_verify_same snip_migrate_trust_domain_without_trust_domain_aliases_6 "$snip_migrate_trust_domain_without_trust_domain_aliases_6_out"
 
 echo y | snip_migrate_trust_domain_with_trust_domain_aliases_1