Feat: upgrade istio from 1.19.5 to 1.27.1 (#3066)

pkg/ingress/kube/gateway/istio/testdata/reference-policy-tcp.yaml

@@ -0,0 +1,85 @@
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: Gateway
+metadata:
+  name: gateway
+  namespace: higress-system
+spec:
+  addresses:
+  - value: higress-gateway
+    type: Hostname
+  gatewayClassName: higress
+  listeners:
+  - name: my-svc
+    port: 34000
+    protocol: TCP
+    allowedRoutes:
+      namespaces:
+        from: All
+  - name: echo
+    port: 34001
+    protocol: TCP
+    allowedRoutes:
+      namespaces:
+        from: All
+---
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: ReferenceGrant
+metadata:
+  name: allow-service-tcp
+  namespace: service
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: TCPRoute
+    namespace: higress-system
+  to:
+  - group: ""
+    kind: Service
+    name: my-svc
+---
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: ReferenceGrant
+metadata:
+  name: allow-service-http
+  namespace: default
+spec:
+  from:
+  - group: gateway.networking.k8s.io
+    kind: HTTPRoute
+    namespace: higress-system
+  to:
+  - group: ""
+    kind: Service
+    name: echo
+---
+apiVersion: gateway.networking.k8s.io/v1alpha2
+kind: TCPRoute
+metadata:
+  name: allowed-my-svc
+  namespace: higress-system
+spec:
+  parentRefs:
+  - name: gateway
+    namespace: higress-system
+    sectionName: my-svc
+  rules:
+  - backendRefs:
+    - name: my-svc
+      namespace: service
+      port: 34000
+---
+apiVersion: gateway.networking.k8s.io/v1alpha2
+kind: TCPRoute
+metadata:
+  name: not-allowed-echo
+  namespace: higress-system
+spec:
+  parentRefs:
+  - name: gateway
+    namespace: higress-system
+    sectionName: echo
+  rules:
+  - backendRefs:
+    - name: echo
+      namespace: default
+      port: 34001