Feat: upgrade istio from 1.19.5 to 1.27.1 (#3066)

This commit is contained in:
EndlessSeeker
2025-11-20 14:43:30 +08:00
committed by GitHub
parent 7dfc42fd92
commit b2b4f72775
173 changed files with 25684 additions and 4741 deletions

View File

@@ -1,11 +1,11 @@
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: GatewayClass
metadata:
name: higress
spec:
controllerName: higress.io/gateway-controller
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: gateway
@@ -24,7 +24,7 @@ spec:
namespaces:
from: All
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: invalid-service
@@ -40,7 +40,7 @@ spec:
- value: fake-service.com
type: Hostname
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: target-port-reference
@@ -55,25 +55,24 @@ spec:
hostname: "*.example"
port: 8080 # Test service has port 80 with targetPort 8080
protocol: HTTP
#---
# Higress 仅支持 addresses type 为 Hostname
#apiVersion: gateway.networking.k8s.io/v1alpha2
#kind: Gateway
#metadata:
# name: invalid-gateway-address
# namespace: invalid-gateway-address
#spec:
# gatewayClassName: higress
# addresses:
# - value: 1.2.3.4
# type: istio.io/FakeType
# listeners:
# - name: default
# hostname: "*.domain.example"
# port: 80
# protocol: HTTP
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: invalid-gateway-address
namespace: invalid-gateway-address
spec:
gatewayClassName: higress
addresses:
- value: 1.2.3.4
type: istio.io/FakeType
listeners:
- name: default
hostname: "*.domain.example"
port: 80
protocol: HTTP
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: invalid-cert-kind
@@ -95,7 +94,7 @@ spec:
group: core
kind: unknown
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: invalid-cert-notfound
@@ -116,7 +115,7 @@ spec:
- name: nonexistent
kind: Secret
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: invalid-cert-malformed
@@ -137,7 +136,43 @@ spec:
- name: malformed
kind: Secret
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: udp-protocol
namespace: higress-system
spec:
gatewayClassName: higress
listeners:
- name: udp
port: 1234
protocol: UDP
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: unknown-protocol
namespace: higress-system
spec:
gatewayClassName: higress
listeners:
- name: unknown
port: 1234
protocol: unknown
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: protocol-lower-case
namespace: higress-system
spec:
gatewayClassName: higress
listeners:
- name: http
port: 1234
protocol: http
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-backendRef-kind
@@ -152,7 +187,7 @@ spec:
- name: httpbin
kind: GcsBucket
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-backendRef-notfound
@@ -167,7 +202,7 @@ spec:
- name: nonexistent
port: 80
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-backendRef-mixed
@@ -189,7 +224,7 @@ spec:
kind: GcsBucket
weight: 1
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-mirror
@@ -210,7 +245,7 @@ spec:
- name: httpbin
port: 80
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: no-backend
@@ -228,7 +263,7 @@ spec:
name: httpbin
port: 80
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-parentRef-port
@@ -245,7 +280,7 @@ spec:
port: 80
weight: 1
---
apiVersion: gateway.networking.k8s.io/v1alpha2
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-sectionname-port
@@ -261,3 +296,92 @@ spec:
- name: httpbin
port: 80
weight: 1
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-parentRef-service
namespace: default
spec:
parentRefs:
- group: ""
kind: Service
name: not-found
rules:
- backendRefs:
- name: httpbin
port: 80
weight: 1
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-parentRef-service-entry
namespace: default
spec:
parentRefs:
- group: "networking.istio.io"
kind: ServiceEntry
name: not-found
rules:
- backendRefs:
- name: httpbin
port: 80
weight: 1
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-backendRef-hostname
namespace: default
spec:
parentRefs:
- group: ""
kind: Service
name: httpbin
rules:
- backendRefs:
- name: unknown.example.com
kind: Hostname
group: networking.istio.io
port: 80
weight: 1
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-backendRef-serviceimport
namespace: default
spec:
parentRefs:
- group: ""
kind: Service
name: httpbin
rules:
- backendRefs:
- group: multicluster.x-k8s.io
kind: ServiceImport
name: unknown-service-import
port: 80
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: invalid-backendRef-mirror
namespace: default
spec:
parentRefs:
- group: ""
kind: Service
name: httpbin
rules:
- filters:
- type: RequestMirror
requestMirror:
backendRef:
name: does-not-exist
port: 80
backendRefs:
- name: httpbin
port: 80
weight: 1