Feat: upgrade istio from 1.19.5 to 1.27.1 (#3066)

pkg/ingress/kube/gateway/istio/testdata/route-binding.yaml

@@ -1,11 +1,11 @@
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: GatewayClass
 metadata:
   name: higress
 spec:
   controllerName: higress.io/gateway-controller
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: Gateway
 metadata:
   name: gateway
@@ -45,8 +45,8 @@ spec:
         from: All
       kinds:
       - kind: TCPRoute
-  - name: namespace-selector
-    hostname: "*.namespace-selector.example"
+  - name: slctr-labels
+    hostname: "*.slctr-labels.example"
     port: 80
     protocol: HTTP
     allowedRoutes:
@@ -55,8 +55,142 @@ spec:
         selector:
           matchLabels:
             istio.io/test-name-part: group
+  - name: slctr-expr-in-yes
+    hostname: "*.slctr-expr-in-yes.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchExpressions:
+          - key: istio.io/test-name-part
+            operator: In
+            values:
+              - group
+  - name: slctr-expr-in-no
+    hostname: "*.slctr-expr-in-no.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchExpressions:
+          - key: istio.io/test-name-part
+            operator: In
+            values:
+              - public
+  - name: slctr-expr-notin-yes
+    hostname: "*.slctr-expr-notin-yes.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchExpressions:
+          - key: istio.io/test-name-part
+            operator: NotIn
+            values:
+              - private
+          - key: istio.io/test-label-not-found
+            operator: NotIn
+            values:
+              - irrelevant
+  - name: slctr-expr-notin-no
+    hostname: "*.slctr-expr-notin-no.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchExpressions:
+          - key: istio.io/test-name-part
+            operator: NotIn
+            values:
+              - group
+          - key: istio.io/test-label-not-found
+            operator: NotIn
+            values:
+              - irrelevant
+  - name: slctr-expr-exists-yes
+    hostname: "*.slctr-expr-exists-yes.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchExpressions:
+          - key: istio.io/test-name-part
+            operator: Exists
+  - name: slctr-expr-exists-no
+    hostname: "*.slctr-expr-exists-no.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchExpressions:
+          - key: istio.io/test-name-public
+            operator: Exists
+  - name: slctr-expr-dne-yes
+    hostname: "*.slctr-expr-dne-yes.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchExpressions:
+          - key: istio.io/test-label-not-found
+            operator: DoesNotExist
+  - name: slctr-expr-dne-no
+    hostname: "*.slctr-expr-dne-no.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchExpressions:
+          - key: istio.io/test-name-part
+            operator: DoesNotExist
+  - name: slctr-combined-yes
+    hostname: "*.slctr-combined-yes.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchLabels:
+            istio.io/test-name-part: group
+          matchExpressions:
+          - key: istio.io/test-name-part
+            operator: In
+            values:
+              - group
+  - name: slctr-combined-no
+    hostname: "*.slctr-combined-no.example"
+    port: 80
+    protocol: HTTP
+    allowedRoutes:
+      namespaces:
+        from: Selector
+        selector:
+          matchLabels:
+            istio.io/test-name-part: public
+          matchExpressions:
+          - key: istio.io/test-name-part
+            operator: In
+            values:
+              - group
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
   name: section-name-cross-namespace
@@ -72,11 +206,11 @@ spec:
     - name: httpbin
       port: 80
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
   name: same-namespace-valid
-  namespace: higress-system
+  namespace: istio-system
 spec:
   parentRefs:
   - name: gateway
@@ -90,7 +224,7 @@ spec:
     - name: httpbin
       port: 81
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
   name: same-namespace-invalid
@@ -123,7 +257,7 @@ spec:
     - name: httpbin
       port: 82
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
   name: host-mismatch
@@ -139,7 +273,7 @@ spec:
     - name: httpbin
       port: 84
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
   name: bind-all
@@ -153,7 +287,7 @@ spec:
     - name: httpbin
       port: 85
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
   name: bind-cross-namespace
@@ -162,13 +296,43 @@ spec:
   parentRefs:
   - name: gateway
     namespace: higress-system
-    sectionName: namespace-selector
+    sectionName: slctr-labels
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-expr-in-yes
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-expr-in-no
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-expr-notin-yes
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-expr-notin-no
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-expr-exists-yes
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-expr-exists-no
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-expr-dne-yes
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-expr-dne-no
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-combined-yes
+  - name: gateway
+    namespace: higress-system
+    sectionName: slctr-combined-no
   rules:
   - backendRefs:
     - name: httpbin
       port: 86
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
   name: bind-cross-namespace
@@ -177,13 +341,13 @@ spec:
   parentRefs:
   - name: gateway
     namespace: higress-system
-    sectionName: namespace-selector
+    sectionName: slctr-labels
   rules:
   - backendRefs:
     - name: httpbin
       port: 87
 ---
-apiVersion: gateway.networking.k8s.io/v1alpha2
+apiVersion: gateway.networking.k8s.io/v1beta1
 kind: HTTPRoute
 metadata:
   name: invalid-bind-cross-namespace
@@ -192,7 +356,7 @@ spec:
   parentRefs:
   - name: gateway
     namespace: higress-system
-    sectionName: namespace-selector
+    sectionName: slctr-labels
   rules:
   - backendRefs:
     - name: httpbin