Feat: upgrade istio from 1.19.5 to 1.27.1 (#3066)

This commit is contained in:
EndlessSeeker
2025-11-20 14:43:30 +08:00
committed by GitHub
parent 7dfc42fd92
commit b2b4f72775
173 changed files with 25684 additions and 4741 deletions

View File

@@ -0,0 +1,89 @@
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
name: gateway
namespace: higress-system
spec:
addresses:
- value: higress-gateway
type: Hostname
gatewayClassName: higress
listeners:
- name: simple
hostname: "*.domain.example"
port: 80
protocol: HTTP
allowedRoutes:
namespaces:
from: All
---
apiVersion: inference.networking.x-k8s.io/v1alpha2
kind: InferencePool
metadata:
name: my-ip
namespace: inferencepool
spec:
extensionRef:
failureMode: FailOpen
group: ""
kind: Service
name: endpoint-picker-svc
selector:
app: model-server
targetPortNumber: 3000
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: ReferenceGrant
metadata:
name: allow-service-ip
namespace: inferencepool
spec:
from:
- group: gateway.networking.k8s.io
kind: HTTPRoute
namespace: higress-system
to:
- group: inference.networking.x-k8s.io
kind: InferencePool
name: my-ip
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: backend-allowed-ip
namespace: higress-system
spec:
parentRefs:
- name: gateway
namespace: higress-system
hostnames: ["simple.domain.example"]
rules:
- backendRefs:
- name: my-ip
kind: InferencePool
group: inference.networking.x-k8s.io
namespace: inferencepool
port: 80
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
name: backend-not-allowed-ip
namespace: higress-system
spec:
parentRefs:
- name: gateway
namespace: higress-system
hostnames: ["simple2.domain.example"]
rules:
- backendRefs:
- name: my-ip
kind: InferencePool
group: inference.networking.x-k8s.io
namespace: inferencepool
port: 80
weight: 1
- name: httpbin
namespace: default
port: 80
weight: 1