Feat: upgrade istio from 1.19.5 to 1.27.1 (#3066)

2026-05-27 22:27:29 +08:00 · 2025-11-20 14:43:30 +08:00
parent 7dfc42fd92
commit b2b4f72775
173 changed files with 25684 additions and 4741 deletions
--- a/pkg/ingress/kube/gateway/istio/testdata/invalid.yaml.golden
+++ b/pkg/ingress/kube/gateway/istio/testdata/invalid.yaml.golden
@@ -2,6 +2,7 @@ apiVersion: networking.istio.io/v1alpha3
 kind: Gateway
 metadata:
  annotations:
+    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/default.higress-system
  creationTimestamp: null
@@ -20,6 +21,7 @@ apiVersion: networking.istio.io/v1alpha3
 kind: Gateway
 metadata:
  annotations:
+    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: fake-service.com
    internal.istio.io/parents: Gateway/invalid-service/default.higress-system
  creationTimestamp: null
@@ -38,6 +40,7 @@ apiVersion: networking.istio.io/v1alpha3
 kind: Gateway
 metadata:
  annotations:
+    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/target-port-reference/default.higress-system
  creationTimestamp: null
@@ -53,13 +56,118 @@ spec:
      protocol: HTTP
 ---
 apiVersion: networking.istio.io/v1alpha3
+kind: Gateway
+metadata:
+  annotations:
+    internal.istio.io/gateway-semantics: gateway
+    internal.istio.io/gateway-service: higress-gateway.higress-system.svc.cluster.local
+    internal.istio.io/parents: Gateway/invalid-gateway-address/default.invalid-gateway-address
+  creationTimestamp: null
+  name: invalid-gateway-address-istio-autogenerated-k8s-gateway-default
+  namespace: invalid-gateway-address
+spec:
+  servers:
+  - hosts:
+    - invalid-gateway-address/*.domain.example
+    port:
+      name: default
+      number: 80
+      protocol: HTTP
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  annotations:
+    internal.istio.io/parents: HTTPRoute/invalid-backendRef-hostname.default,HTTPRoute/invalid-backendRef-mirror.default,HTTPRoute/invalid-backendRef-serviceimport.default,HTTPRoute/no-backend.default
+    internal.istio.io/route-semantics: gateway
+  creationTimestamp: null
+  name: default~httpbin.default.svc.domain.suffix
+  namespace: default
+spec:
+  gateways:
+  - mesh
+  hosts:
+  - httpbin.default.svc.domain.suffix
+  http:
+  - name: default/invalid-backendRef-hostname
+    route:
+    - destination:
+        host: unknown.example.com
+        port:
+          number: 80
+  - name: default/invalid-backendRef-mirror
+    route:
+    - destination:
+        host: httpbin.default.svc.domain.suffix
+        port:
+          number: 80
+  - name: default/invalid-backendRef-serviceimport
+    route:
+    - destination:
+        host: unknown-service-import.default.svc.domain.suffix
+        port:
+          number: 80
+  - directResponse:
+      status: 500
+    mirrors:
+    - destination:
+        host: httpbin.default.svc.domain.suffix
+        port:
+          number: 80
+    name: default/no-backend
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  annotations:
+    internal.istio.io/parents: HTTPRoute/invalid-parentRef-service.default
+    internal.istio.io/route-semantics: gateway
+  creationTimestamp: null
+  name: default~not-found.default.svc.domain.suffix
+  namespace: default
+spec:
+  gateways:
+  - mesh
+  hosts:
+  - not-found.default.svc.domain.suffix
+  http:
+  - name: default/invalid-parentRef-service
+    route:
+    - destination:
+        host: httpbin.default.svc.domain.suffix
+        port:
+          number: 80
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  annotations:
+    internal.istio.io/parents: HTTPRoute/invalid-mirror.default
+    internal.istio.io/route-semantics: gateway
+  creationTimestamp: null
+  name: higress-system~gateway-istio-autogenerated-k8s-gateway-default~*
+  namespace: default
+spec:
+  gateways:
+  - higress-system/gateway-istio-autogenerated-k8s-gateway-default
+  hosts:
+  - '*'
+  http:
+  - name: default/invalid-mirror
+    route:
+    - destination:
+        host: httpbin.default.svc.domain.suffix
+        port:
+          number: 80
+---
+apiVersion: networking.istio.io/v1alpha3
 kind: VirtualService
 metadata:
  annotations:
    internal.istio.io/parents: HTTPRoute/invalid-backendRef-kind.default
    internal.istio.io/route-semantics: gateway
  creationTimestamp: null
-  name: invalid-backendRef-kind-0-istio-autogenerated-k8s-gateway
+  name: higress-system~gateway-istio-autogenerated-k8s-gateway-default~first.domain.example
  namespace: default
 spec:
  gateways:
@@ -73,12 +181,34 @@ spec:
 ---
 apiVersion: networking.istio.io/v1alpha3
 kind: VirtualService
+metadata:
+  annotations:
+    internal.istio.io/parents: HTTPRoute/invalid-backendRef-notfound.default
+    internal.istio.io/route-semantics: gateway
+  creationTimestamp: null
+  name: higress-system~gateway-istio-autogenerated-k8s-gateway-default~second.domain.example
+  namespace: default
+spec:
+  gateways:
+  - higress-system/gateway-istio-autogenerated-k8s-gateway-default
+  hosts:
+  - second.domain.example
+  http:
+  - name: default/invalid-backendRef-notfound
+    route:
+    - destination:
+        host: nonexistent.default.svc.domain.suffix
+        port:
+          number: 80
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
 metadata:
  annotations:
    internal.istio.io/parents: HTTPRoute/invalid-backendRef-mixed.default
    internal.istio.io/route-semantics: gateway
  creationTimestamp: null
-  name: invalid-backendRef-mixed-0-istio-autogenerated-k8s-gateway
+  name: higress-system~gateway-istio-autogenerated-k8s-gateway-default~third.domain.example
  namespace: default
 spec:
  gateways:
@@ -101,48 +231,3 @@ spec:
    - destination: {}
      weight: 1
 ---
-apiVersion: networking.istio.io/v1alpha3
-kind: VirtualService
-metadata:
-  annotations:
-    internal.istio.io/parents: HTTPRoute/invalid-backendRef-notfound.default
-    internal.istio.io/route-semantics: gateway
-  creationTimestamp: null
-  name: invalid-backendRef-notfound-0-istio-autogenerated-k8s-gateway
-  namespace: default
-spec:
-  gateways:
-  - higress-system/gateway-istio-autogenerated-k8s-gateway-default
-  hosts:
-  - second.domain.example
-  http:
-  - name: default/invalid-backendRef-notfound
-    route:
-    - destination:
-        host: nonexistent.default.svc.domain.suffix
-        port:
-          number: 80
---
-apiVersion: networking.istio.io/v1alpha3
-kind: VirtualService
-metadata:
-  annotations:
-    internal.istio.io/parents: HTTPRoute/no-backend.default
-    internal.istio.io/route-semantics: gateway
-  creationTimestamp: null
-  name: no-backend-0-istio-autogenerated-k8s-gateway
-  namespace: default
-spec:
-  gateways:
-  - mesh
-  hosts:
-  - httpbin.default.svc.domain.suffix
-  http:
-  - directResponse:
-      status: 500
-    mirror:
-      host: httpbin.default.svc.domain.suffix
-      port:
-        number: 80
-    name: default/no-backend
---