Feat: upgrade istio from 1.19.5 to 1.27.1 (#3066)

2026-06-02 17:17:27 +08:00 · 2025-11-20 14:43:30 +08:00
parent 7dfc42fd92
commit b2b4f72775
173 changed files with 25684 additions and 4741 deletions
--- a/pkg/ingress/kube/gateway/istio/testdata/eastwest.yaml.golden
+++ b/pkg/ingress/kube/gateway/istio/testdata/eastwest.yaml.golden
@@ -0,0 +1,109 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: Gateway
+metadata:
+  annotations:
+    internal.istio.io/gateway-semantics: gateway
+    internal.istio.io/gateway-service: eastwestgateway-istio.istio-system.svc.domain.suffix
+    internal.istio.io/parents: Gateway/eastwestgateway/cross-network.istio-system
+  creationTimestamp: null
+  name: eastwestgateway-istio-autogenerated-k8s-gateway-cross-network
+  namespace: istio-system
+spec:
+  servers:
+  - hosts:
+    - istio-system/*.local
+    port:
+      name: default
+      number: 15443
+      protocol: TLS
+    tls:
+      mode: AUTO_PASSTHROUGH
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: Gateway
+metadata:
+  annotations:
+    internal.istio.io/gateway-semantics: gateway
+    internal.istio.io/gateway-service: eastwestgateway-istio.istio-system.svc.domain.suffix
+    internal.istio.io/parents: Gateway/eastwestgateway/istiod-grpc.istio-system
+  creationTimestamp: null
+  name: eastwestgateway-istio-autogenerated-k8s-gateway-istiod-grpc
+  namespace: istio-system
+spec:
+  servers:
+  - hosts:
+    - istio-system/*
+    port:
+      name: default
+      number: 15012
+      protocol: TLS
+    tls: {}
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: Gateway
+metadata:
+  annotations:
+    internal.istio.io/gateway-semantics: gateway
+    internal.istio.io/gateway-service: eastwestgateway-istio.istio-system.svc.domain.suffix
+    internal.istio.io/parents: Gateway/eastwestgateway/istiod-webhook.istio-system
+  creationTimestamp: null
+  name: eastwestgateway-istio-autogenerated-k8s-gateway-istiod-webhook
+  namespace: istio-system
+spec:
+  servers:
+  - hosts:
+    - istio-system/*
+    port:
+      name: default
+      number: 15017
+      protocol: TLS
+    tls: {}
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  annotations:
+    internal.istio.io/parents: TLSRoute/eastwestgateway-grpc.istio-system
+    internal.istio.io/route-semantics: gateway
+  creationTimestamp: null
+  name: eastwestgateway-grpc-tls-0-istio-autogenerated-k8s-gateway
+  namespace: istio-system
+spec:
+  gateways:
+  - istio-system/eastwestgateway-istio-autogenerated-k8s-gateway-istiod-grpc
+  hosts:
+  - '*'
+  tls:
+  - match:
+    - sniHosts:
+      - '*'
+    route:
+    - destination:
+        host: istiod.istio-system.svc.domain.suffix
+        port:
+          number: 15012
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  annotations:
+    internal.istio.io/parents: TLSRoute/eastwestgateway-webhook.istio-system
+    internal.istio.io/route-semantics: gateway
+  creationTimestamp: null
+  name: eastwestgateway-webhook-tls-0-istio-autogenerated-k8s-gateway
+  namespace: istio-system
+spec:
+  gateways:
+  - istio-system/eastwestgateway-istio-autogenerated-k8s-gateway-istiod-webhook
+  hosts:
+  - '*'
+  tls:
+  - match:
+    - sniHosts:
+      - '*'
+    route:
+    - destination:
+        host: istiod.istio-system.svc.domain.suffix
+        port:
+          number: 15017
+---