Feat: upgrade istio from 1.19.5 to 1.27.1 (#3066)

This commit is contained in:
EndlessSeeker
2025-11-20 14:43:30 +08:00
committed by GitHub
parent 7dfc42fd92
commit b2b4f72775
173 changed files with 25684 additions and 4741 deletions

View File

@@ -2,11 +2,12 @@ apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/default.higress-system
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/default.istio-system
creationTimestamp: null
name: gateway-istio-autogenerated-k8s-gateway-default
namespace: higress-system
namespace: istio-system
spec:
servers:
- hosts:
@@ -21,14 +22,88 @@ apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: HTTPRoute/http.allowed-1,HTTPRoute/http.allowed-2
internal.istio.io/parents: HTTPRoute/http.allowed-1
internal.istio.io/route-semantics: gateway
creationTimestamp: null
name: http-0-istio-autogenerated-k8s-gateway
name: allowed-1~a-example.allowed-1.svc.domain.suffix
namespace: allowed-1
spec:
gateways:
- higress-system/gateway-istio-autogenerated-k8s-gateway-default
- mesh
hosts:
- a-example.allowed-1.svc.domain.suffix
http:
- match:
- headers:
my-header:
exact: some-value
uri:
prefix: /foo
name: allowed-1/http
route:
- destination:
host: svc1.allowed-1.svc.domain.suffix
port:
number: 80
- match:
- uri:
regex: /foo((\/).*)?
name: allowed-1/http
route:
- destination:
host: svc2.allowed-1.svc.domain.suffix
port:
number: 80
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: HTTPRoute/http.allowed-1
internal.istio.io/route-semantics: gateway
creationTimestamp: null
name: allowed-1~b-example.allowed-1.svc.domain.suffix
namespace: allowed-1
spec:
gateways:
- mesh
hosts:
- b-example.allowed-1.svc.domain.suffix
http:
- match:
- headers:
my-header:
exact: some-value
uri:
prefix: /foo
name: allowed-1/http
route:
- destination:
host: svc1.allowed-1.svc.domain.suffix
port:
number: 80
- match:
- uri:
regex: /foo((\/).*)?
name: allowed-1/http
route:
- destination:
host: svc2.allowed-1.svc.domain.suffix
port:
number: 80
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: HTTPRoute/http.allowed-1,HTTPRoute/http.allowed-2
internal.istio.io/route-semantics: gateway
creationTimestamp: null
name: istio-system~gateway-istio-autogenerated-k8s-gateway-default~a.domain.example
namespace: allowed-1
spec:
gateways:
- istio-system/gateway-istio-autogenerated-k8s-gateway-default
hosts:
- a.domain.example
http:
@@ -88,15 +163,6 @@ spec:
host: svc2.allowed-2.svc.domain.suffix
port:
number: 80
- match:
- uri:
regex: /foo((\/).*)?
name: allowed-1/http
route:
- destination:
host: svc2.allowed-1.svc.domain.suffix
port:
number: 80
- match:
- uri:
prefix: /
@@ -106,6 +172,15 @@ spec:
host: svc3.allowed-2.svc.domain.suffix
port:
number: 80
- match:
- uri:
regex: /foo((\/).*)?
name: allowed-1/http
route:
- destination:
host: svc2.allowed-1.svc.domain.suffix
port:
number: 80
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
@@ -114,11 +189,11 @@ metadata:
internal.istio.io/parents: HTTPRoute/http.allowed-1
internal.istio.io/route-semantics: gateway
creationTimestamp: null
name: http-1-istio-autogenerated-k8s-gateway
name: istio-system~gateway-istio-autogenerated-k8s-gateway-default~b.domain.example
namespace: allowed-1
spec:
gateways:
- higress-system/gateway-istio-autogenerated-k8s-gateway-default
- istio-system/gateway-istio-autogenerated-k8s-gateway-default
hosts:
- b.domain.example
http:
@@ -146,86 +221,12 @@ spec:
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: HTTPRoute/http.allowed-1
internal.istio.io/route-semantics: gateway
creationTimestamp: null
name: http-2-istio-autogenerated-k8s-gateway
namespace: allowed-1
spec:
gateways:
- mesh
hosts:
- a-example.allowed-1.svc.domain.suffix
http:
- match:
- headers:
my-header:
exact: some-value
uri:
prefix: /foo
name: allowed-1/http
route:
- destination:
host: svc1.allowed-1.svc.domain.suffix
port:
number: 80
- match:
- uri:
regex: /foo((\/).*)?
name: allowed-1/http
route:
- destination:
host: svc2.allowed-1.svc.domain.suffix
port:
number: 80
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: HTTPRoute/http.allowed-1
internal.istio.io/route-semantics: gateway
creationTimestamp: null
name: http-3-istio-autogenerated-k8s-gateway
namespace: allowed-1
spec:
gateways:
- mesh
hosts:
- b-example.allowed-1.svc.domain.suffix
http:
- match:
- headers:
my-header:
exact: some-value
uri:
prefix: /foo
name: allowed-1/http
route:
- destination:
host: svc1.allowed-1.svc.domain.suffix
port:
number: 80
- match:
- uri:
regex: /foo((\/).*)?
name: allowed-1/http
route:
- destination:
host: svc2.allowed-1.svc.domain.suffix
port:
number: 80
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: HTTPRoute/http.allowed-2
internal.istio.io/route-semantics: gateway
creationTimestamp: null
name: http-0-istio-autogenerated-k8s-gateway
name: allowed-2~a-example.allowed-2.svc.domain.suffix
namespace: allowed-2
spec:
gateways: