Jchrapko/update istio 1 26 (#1311)

Author: jcchr

deploy/charts/istio/istio-base/chart/Chart.yaml.template

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 1.24.2
+appVersion: 1.26.4
 description: Helm chart for deploying Istio cluster resources and CRDs
 icon: https://istio.io/latest/favicons/android-192x192.png
 keywords:

deploy/charts/istio/istio-base/chart/files/profile-compatibility-version-1.24.yaml

@@ -0,0 +1,13 @@
+# WARNING: DO NOT EDIT, THIS FILE IS A COPY.
+# The original version of this file is located at /manifests/helm-profiles directory.
+# If you want to make a change in this file, edit the original one and run "make gen".
+
+pilot:
+  env:
+    # 1.24 behavioral changes
+    PILOT_ENABLE_IP_AUTOALLOCATE: "false"
+ambient:
+  dnsCapture: false
+  reconcileIptablesOnStartup: false
+  # 1.26 behavioral changes
+  shareHostNetworkNamespace: true

deploy/charts/istio/istio-base/chart/files/profile-compatibility-version-1.25.yaml

@@ -0,0 +1,7 @@
+# WARNING: DO NOT EDIT, THIS FILE IS A COPY.
+# The original version of this file is located at /manifests/helm-profiles directory.
+# If you want to make a change in this file, edit the original one and run "make gen".
+
+ambient:
+  # 1.26 behavioral changes
+  shareHostNetworkNamespace: true

deploy/charts/istio/istio-base/chart/files/profile-platform-k3s.yaml

@@ -4,4 +4,4 @@
 
 cni:
   cniConfDir: /var/lib/rancher/k3s/agent/etc/cni/net.d
-  cniBinDir: /var/lib/rancher/k3s/data/current/bin/
+  cniBinDir: /var/lib/rancher/k3s/data/cni

…trevision-validatingadmissionpolicy.yaml …trevision-validatingadmissionpolicy.yamldeploy/charts/istio/istio-istiod/chart/templates/defaultrevision-validatingadmissionpolicy.yaml renamed to deploy/charts/istio/istio-base/chart/templates/defaultrevision-validatingadmissionpolicy.yaml deploy/charts/istio/istio-istiod/chart/templates/defaultrevision-validatingadmissionpolicy.yaml renamed to deploy/charts/istio/istio-base/chart/templates/defaultrevision-validatingadmissionpolicy.yaml

@@ -1,5 +1,3 @@
-# moved here from istio/base as it is related to istiod
-# it also introduces issues during upgrade with race conditions
 {{- if and .Values.experimental.stableValidationPolicy (not (eq .Values.defaultRevision "")) }}
 apiVersion: admissionregistration.k8s.io/v1
 kind: ValidatingAdmissionPolicy

…sion-validatingwebhookconfiguration.yaml …sion-validatingwebhookconfiguration.yamldeploy/charts/istio/istio-istiod/chart/templates/defaultrevision-validatingwebhookconfiguration.yaml renamed to deploy/charts/istio/istio-base/chart/templates/defaultrevision-validatingwebhookconfiguration.yaml deploy/charts/istio/istio-istiod/chart/templates/defaultrevision-validatingwebhookconfiguration.yaml renamed to deploy/charts/istio/istio-base/chart/templates/defaultrevision-validatingwebhookconfiguration.yaml

@@ -1,5 +1,3 @@
-# moved here from istio/base as it is related to istiod
-# it also introduces issues during upgrade with race conditions
 {{- if not (eq .Values.defaultRevision "") }}
 apiVersion: admissionregistration.k8s.io/v1
 kind: ValidatingWebhookConfiguration

deploy/charts/istio/istio-base/chart/templates/zzz_profile.yaml

@@ -24,11 +24,11 @@ Finally, we can set all of that under .Values so the chart behaves without aware
 {{- $defaults := $.Values._internal_defaults_do_not_set }}
 {{- $_ := unset $.Values "_internal_defaults_do_not_set" }}
 {{- $profile := dict }}
-{{- with .Values.profile }}
+{{- with (coalesce ($.Values).profile ($.Values.global).profile) }}
 {{- with $.Files.Get (printf "files/profile-%s.yaml" .)}}
 {{- $profile = (. | fromYaml) }}
 {{- else }}
-{{ fail (cat "unknown profile" $.Values.profile) }}
+{{ fail (cat "unknown profile" .) }}
 {{- end }}
 {{- end }}
 {{- with .Values.compatibilityVersion }}
@@ -38,11 +38,11 @@ Finally, we can set all of that under .Values so the chart behaves without aware
 {{ fail (cat "unknown compatibility version" $.Values.compatibilityVersion) }}
 {{- end }}
 {{- end }}
-{{- if ($.Values.global).platform }}
-{{- with $.Files.Get (printf "files/profile-platform-%s.yaml" ($.Values.global).platform) }}
+{{- with (coalesce ($.Values).platform ($.Values.global).platform) }}
+{{- with $.Files.Get (printf "files/profile-platform-%s.yaml" .) }}
 {{- $ignore := mustMergeOverwrite $profile (. | fromYaml) }}
 {{- else }}
-{{ fail (cat "unknown platform" ($.Values.global).platform) }}
+{{ fail (cat "unknown platform" .) }}
 {{- end }}
 {{- end }}
 {{- if $profile }}
@@ -52,6 +52,7 @@ Finally, we can set all of that under .Values so the chart behaves without aware
 {{- if false }}
 {{- $a := mustMergeOverwrite $defaults ($profile.global) ($.Values.global | default dict)  }}
 {{- end }}
+{{- $x := set $.Values "_original" (deepCopy $.Values) }}
 {{- $b := set $ "Values" (mustMergeOverwrite $defaults $.Values) }}
 
 {{/*

deploy/charts/istio/istio-gateway/chart/Chart.yaml.template

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 1.24.2
+appVersion: 1.26.4
 description: Helm chart for deploying Istio gateways
 icon: https://istio.io/latest/favicons/android-192x192.png
 keywords:

deploy/charts/istio/istio-gateway/chart/templates/deployment.yaml

@@ -41,6 +41,9 @@ spec:
         {{ $key | quote }}: {{ $val | quote }}
         {{- end }}
         {{- end }}
+        {{- with .Values.networkGateway }}
+        topology.istio.io/network: "{{.}}"
+        {{- end }}
     spec:
       serviceAccountName: {{ include "gateway.serviceAccountName" . }}
       securityContext:

deploy/charts/istio/istio-gateway/chart/templates/service.yaml

@@ -21,6 +21,9 @@ spec:
   {{- if hasKey .Values.service "allocateLoadBalancerNodePorts" }}
   allocateLoadBalancerNodePorts: {{ .Values.service.allocateLoadBalancerNodePorts }}
   {{- end }}
+  {{- if hasKey .Values.service "loadBalancerClass" }}
+  loadBalancerClass: {{ .Values.service.loadBalancerClass }}
+  {{- end }}
 {{- end }}
 {{- if .Values.service.ipFamilyPolicy }}
   ipFamilyPolicy: {{ .Values.service.ipFamilyPolicy }}