forked from gardener/gardener
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Update Istio to 1.19.3 (gardener#8723)
* Update Istio to 1.19.3 * sidecar is not needed. * Reduce diff and Update README.md * Re-add EnvoyFilter for per_connection_buffer_limit_bytes and keep alive. * Refactor istio unit test. * Fix proxy-protocol envoy filter. * Update vendored istio version. * Address review comments. Change log level. * Add global destination rule again. Though, it is not needed for the correct function, it might be useful as a safety net. Moreover, if we decide not to globally enable mutual tls, we could get rid off the other destination rules. * Remove vendor folder.
- Loading branch information
Showing
52 changed files
with
1,944 additions
and
3,097 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,36 +1,44 @@ | ||
| # Test | ||
| # Istio update to new Istio version | ||
|
|
||
| Istio helm repository (not required directly): | ||
| Render current version in gardener repository: | ||
| ```console | ||
| helm repo add istio https://istio-release.storage.googleapis.com/charts | ||
| helm repo update | ||
| helm template istio pkg/component/istio/charts/istio/istio-crds -n istio-system > istio-crds.yaml | ||
|
|
||
| helm template istio pkg/component/istio/charts/istio/istio-istiod -n istio-system \ | ||
| --set=deployNamespace=true > istio-istiod.yaml | ||
|
|
||
| helm template istio pkg/component/istio/charts/istio/istio-ingress -n istio-ingress \ | ||
| --set=deployNamespace=true \ | ||
| --set=serviceType=ClusterIP \ | ||
| --set=portsNames.status=status-port > istio-ingress.yaml | ||
| ``` | ||
|
|
||
| Clone istio github repository and checkout desired release tag: | ||
| ```console | ||
| ISTIO_VERSION=1.19.3 | ||
| git clone https://github.com/istio/istio.git | ||
| cd istio | ||
| git checkout $ISTIO_VERSION | ||
| ``` | ||
|
|
||
| Current version in gardener repository: | ||
| Compare crds: | ||
| ```console | ||
| helm template istio pkg/component/istio/charts/istio/istio-crds -n istio-system > 01-istio.yaml | ||
| helm template istio pkg/component/istio/charts/istio/istio-istiod -n istio-system --set=deployNamespace=true > 02-istio.yaml | ||
| helm template istio pkg/component/istio/charts/istio/istio-ingress -n istio-ingress --set=deployNamespace=true --set=serviceType=ClusterIP --set=portsNames.status=status-port > 03-istio.yaml | ||
| cat 03-istio.yaml | sed -n "`grep -n EnvoyFilter 03-istio.yaml | head -n 1 | awk -F: '{print $1}'`,`cat 03-istio.yaml|wc -l`p" > 04-istio.yaml | ||
| diff istio-crds.yaml istio/${ISTIO_VERSION}/manifests/charts/base/crds/crd-all.gen.yaml | ||
| ``` | ||
|
|
||
| New upstream version: | ||
| Render new version in istio/istio repository: | ||
| ```console | ||
| ISTIO_VERSION=1.14.1 | ||
| curl https://raw.githubusercontent.com/istio/istio/${ISTIO_VERSION}/manifests/charts/base/crds/crd-all.gen.yaml -o 01-istio-${ISTIO_VERSION}.yaml | ||
| diff 01-istio.yaml 01-istio-${ISTIO_VERSION}.yaml | ||
| helm template manifests/charts/istio-control/istio-discovery/ -n istio-system \ | ||
| --set=global.omitSidecarInjectorConfigMap=true \ | ||
| --set=global.configValidation=true \ | ||
| --set=pilot.autoscaleEnabled=false \ | ||
| --set=global.operatorManageWebhooks=true > istio-istiod-${ISTIO_VERSION}.yaml | ||
|
|
||
| helm template manifests/charts/gateways/istio-ingress -n istio-ingress > istio-ingress-${ISTIO_VERSION}.yaml | ||
| ``` | ||
|
|
||
| With KUBECONFIG pointing to a cluster without istio crds, i.e. no seed cluster: | ||
| Compare charts: | ||
| ```console | ||
| ISTIO_VERSION=1.14.1 | ||
| kubectl apply -f 01-istio-${ISTIO_VERSION}.yaml | ||
| curl https://istio-release.storage.googleapis.com/charts/gateway-${ISTIO_VERSION}.tgz -o gateway-${ISTIO_VERSION}.tgz | ||
| curl https://istio-release.storage.googleapis.com/charts/istiod-${ISTIO_VERSION}.tgz -o istiod-${ISTIO_VERSION}.tgz | ||
| helm install istiod istiod-${ISTIO_VERSION}.tgz -n istio-system --dry-run > 02-istio-${ISTIO_VERSION}.yaml | ||
| helm install istio-ingress gateway-${ISTIO_VERSION}.tgz -n istio-ingress --dry-run > 03-istio-${ISTIO_VERSION}.yaml | ||
| cat 02-istio-${ISTIO_VERSION}.yaml | sed -n "`grep -n EnvoyFilter 02-istio-${ISTIO_VERSION}.yaml | head -n 1 | awk -F: '{print $1}'`,`cat 02-istio-${ISTIO_VERSION}.yaml|wc -l`p" > 04-istio-${ISTIO_VERSION}.yaml | ||
| diff 02-istio.yaml 02-istio-${ISTIO_VERSION}.yaml | ||
| diff 03-istio.yaml 03-istio-${ISTIO_VERSION}.yaml | ||
| diff 04-istio.yaml 04-istio-${ISTIO_VERSION}.yaml | ||
| diff istio-istiod.yaml istio-istiod-${ISTIO_VERSION}.yaml | ||
| diff istio-ingress.yaml istio-ingress-${ISTIO_VERSION}.yaml | ||
| ``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
17 changes: 0 additions & 17 deletions
17
pkg/component/istio/charts/istio/istio-ingress/templates/bootstrap-config-override.yaml
This file was deleted.
Oops, something went wrong.
Oops, something went wrong.