Feat: upgrade istio from 1.19.5 to 1.27.1 (#3066)

This commit is contained in:
EndlessSeeker
2025-11-20 14:43:30 +08:00
committed by GitHub
parent 7dfc42fd92
commit b2b4f72775
173 changed files with 25684 additions and 4741 deletions

View File

@@ -2,6 +2,7 @@ apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/passthrough.higress-system
creationTimestamp: null
@@ -21,6 +22,7 @@ apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate.higress-system
creationTimestamp: null
@@ -42,6 +44,49 @@ apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-istio-builtin.higress-system
creationTimestamp: null
name: gateway-istio-autogenerated-k8s-gateway-terminate-istio-builtin
namespace: higress-system
spec:
servers:
- hosts:
- '*/builtin.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
mode: SIMPLE
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-istio-mtls.higress-system
creationTimestamp: null
name: gateway-istio-autogenerated-k8s-gateway-terminate-istio-mtls
namespace: higress-system
spec:
servers:
- hosts:
- '*/egress.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
mode: ISTIO_MUTUAL
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-mtls.higress-system
creationTimestamp: null
@@ -60,13 +105,57 @@ spec:
mode: MUTUAL
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-multi.higress-system
creationTimestamp: null
name: gateway-istio-autogenerated-k8s-gateway-terminate-multi
namespace: higress-system
spec:
servers:
- hosts:
- '*/domainmulti.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
credentialNames:
- kubernetes-gateway://higress-system/my-cert-http
- kubernetes-gateway://higress-system/my-cert-http2
mode: SIMPLE
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway2/passthrough.higress-system
creationTimestamp: null
name: gateway2-istio-autogenerated-k8s-gateway-passthrough
namespace: higress-system
spec:
servers:
- hosts:
- '*/*'
port:
name: default
number: 34000
protocol: TLS
tls: {}
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: HTTPRoute/http.default
internal.istio.io/route-semantics: gateway
creationTimestamp: null
name: http-0-istio-autogenerated-k8s-gateway
name: higress-system~gateway-istio-autogenerated-k8s-gateway-terminate~domain.example
namespace: default
spec:
gateways:
@@ -129,3 +218,27 @@ spec:
port:
number: 443
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: TLSRoute/tls.default
internal.istio.io/route-semantics: gateway
creationTimestamp: null
name: tls-tls-1-istio-autogenerated-k8s-gateway
namespace: default
spec:
gateways:
- higress-system/gateway2-istio-autogenerated-k8s-gateway-passthrough
hosts:
- '*'
tls:
- match:
- sniHosts:
- '*'
route:
- destination:
host: httpbin.default.svc.domain.suffix
port:
number: 443
---