Skip to content

chore: upgrade Istio and deprovision operator #2155

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 69 commits into from
May 26, 2025
Merged
Show file tree
Hide file tree
Changes from 56 commits
Commits
Show all changes
69 commits
Select commit Hold shift + click to select a range
d2c771c
feat: migrated Istio operator config to Helm charts
merll May 12, 2025
bf13b0c
fix: imagepullsecrets values structure
merll May 12, 2025
f7c04fa
revert: change to apiversion
merll May 12, 2025
35161ce
feat: improve validation error reporting
merll May 12, 2025
9382263
chore: updated name
merll May 14, 2025
f480c63
fix: attempt with canary upgrade
merll May 16, 2025
8d3f2b6
fix: name is ignored
merll May 14, 2025
776cc91
fix: values file
merll May 14, 2025
abc7b3a
fix: individual app spec for ArgoCD
merll May 14, 2025
90c7fe8
feat: work with revisions
merll May 14, 2025
c40b984
fix: adjustments to revision
merll May 14, 2025
528763f
fix: separate revision labels
merll May 15, 2025
a7e6bbb
feat: separate gateways
merll May 15, 2025
06649a7
fix: added revision to apps
merll May 15, 2025
4a22b2b
fix: added sync wave to istiod
merll May 15, 2025
066f1f6
fix: adjust for sidecar injection
merll May 15, 2025
15b5ab9
feat: revised upgrade script
merll May 16, 2025
083dbb7
chore: updated fixtures
merll May 16, 2025
31aa6b3
fix: updated app check
merll May 16, 2025
cbbaccc
feat: order application manifests
merll May 16, 2025
5e8c0dd
fix: run istio install sooner and take ownership
merll May 16, 2025
4043c94
feat: added uninstall as job
merll May 16, 2025
35ffa4e
fix: improvements to pre- and post-migration
merll May 16, 2025
54f652f
fix: error handling in post-upgrade
merll May 16, 2025
91b1c76
fix: set defaults for team-ns chart
merll May 16, 2025
71874be
chore: set default specVersion
merll May 19, 2025
3ce17bb
revert: obsolete annotations
merll May 19, 2025
7040ecd
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 19, 2025
32bbcd6
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 19, 2025
e9f37b1
feat: trigger pipeline after migration
merll May 19, 2025
df718d1
fix: added missing flag in values changes
merll May 19, 2025
bfb7ddf
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 19, 2025
a726998
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 20, 2025
9546cec
fix: use serviceaccount independent of apl helm release
merll May 19, 2025
c669003
refactor: moved more variable templating to derived
merll May 20, 2025
6a674a2
chore: changed upgrade scripts for version 4.7.0
merll May 20, 2025
9c187b4
feat: deploy istiod using argocd
merll May 20, 2025
eb2a494
fix: updated egress gateway
merll May 20, 2025
d0fb63f
feat: optionally delegate to argocd
merll May 21, 2025
39a37e3
fix: default revision reference
merll May 21, 2025
bfb892d
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 21, 2025
1403364
fix: uninstall job namespace
merll May 21, 2025
28393eb
fix: remove non-functional virtualservice
merll May 21, 2025
ab5a090
refactor: reverse logic of istio default revision
merll May 21, 2025
4f21978
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 21, 2025
cd947a7
fix: check for pending uninstall
merll May 21, 2025
a0ec878
fix: pending uninstall check
merll May 22, 2025
662a676
fix: allow empty commit for triggering pipeline
merll May 22, 2025
352581a
chore: revert obsolete changes to migrations
merll May 22, 2025
1b82874
fix: missing push after commit
merll May 22, 2025
5164dd7
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 22, 2025
9409dd5
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 22, 2025
73c4e39
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 22, 2025
c26e2fc
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 23, 2025
2b1400c
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 23, 2025
69ae749
Merge remote-tracking branch 'origin/main' into APL-704-clean
svcAPLBot May 23, 2025
a39372e
fix: clean up apps in temp dir
merll May 23, 2025
5ac9a02
fix: clean up .rerun file if repo is reused
merll May 23, 2025
d4521b5
refactor: custom migration functions
merll May 23, 2025
1e77013
feat: output only helmfile command on dry-run
merll May 23, 2025
d654252
feat: install istio through migrations module
merll May 23, 2025
ade4fe1
Merge remote-tracking branch 'origin/APL-704-clean' into APL-704-clean
merll May 26, 2025
0c64d2b
feat: added local flag for running migrations except helmfile cmd
merll May 23, 2025
cd2b37f
fix: do not create job on dry run
merll May 23, 2025
36b8d3c
revert: ordering of application manifests, removing files
merll May 23, 2025
821587a
fix: moved take-ownership flag
merll May 23, 2025
72f5d94
chore: remove commented block
merll May 26, 2025
2d469cc
refactor: simplify derived variables
merll May 26, 2025
d1c52f4
fix: cleaned up references to istio-operator namespaces
merll May 26, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion .values/.gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -7,9 +7,10 @@
docker-compose*
bin/
core.yaml
.rerun
.secrets
*.sample
.env
env/status.yaml
env/bootstrap.yaml
values-repo.yaml
values-repo.yaml
4 changes: 2 additions & 2 deletions apps.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -152,8 +152,8 @@ appsInfo:
about: ingress-nginx is an Ingress controller for Kubernetes using NGINX as a reverse proxy and load balancer.
integration: APL integrated ingress-nginx into an advanced ingress architecture.
istio:
title: Istio Operator
appVersion: 1.22.5
title: Istio
appVersion: 1.26.0
repo: https://github.com/istio/istio
maintainers: Istio
relatedLinks:
Expand Down
11 changes: 11 additions & 0 deletions chart/chart-index/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -32,6 +32,17 @@ dependencies:
- name: ingress-nginx
version: 4.11.6
repository: https://kubernetes.github.io/ingress-nginx
- name: base
alias: istio-base
version: 1.26.0
repository: https://istio-release.storage.googleapis.com/charts
- name: gateway
alias: istio-gateway
version: 1.26.0
repository: https://istio-release.storage.googleapis.com/charts
- name: istiod
version: 1.26.0
repository: https://istio-release.storage.googleapis.com/charts
- name: jaeger-operator
version: 2.46.0
repository: https://jaegertracing.github.io/helm-charts
Expand Down
10 changes: 10 additions & 0 deletions charts/istio-base/Chart.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
apiVersion: v2
appVersion: 1.26.0
description: Helm chart for deploying Istio cluster resources and CRDs
icon: https://istio.io/latest/favicons/android-192x192.png
keywords:
- istio
name: base
sources:
- https://github.com/istio/istio
version: 1.26.0
35 changes: 35 additions & 0 deletions charts/istio-base/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
# Istio base Helm Chart

This chart installs resources shared by all Istio revisions. This includes Istio CRDs.

## Setup Repo Info

```console
helm repo add istio https://istio-release.storage.googleapis.com/charts
helm repo update
```

_See [helm repo](https://helm.sh/docs/helm/helm_repo/) for command documentation._

## Installing the Chart

To install the chart with the release name `istio-base`:

```console
kubectl create namespace istio-system
helm install istio-base istio/base -n istio-system
```

### Profiles

Istio Helm charts have a concept of a `profile`, which is a bundled collection of value presets.
These can be set with `--set profile=<profile>`.
For example, the `demo` profile offers a preset configuration to try out Istio in a test environment, with additional features enabled and lowered resource requirements.

For consistency, the same profiles are used across each chart, even if they do not impact a given chart.

Explicitly set values have highest priority, then profile settings, then chart defaults.

As an implementation detail of profiles, the default values for the chart are all nested under `defaults`.
When configuring the chart, you should not include this.
That is, `--set some.field=true` should be passed, not `--set defaults.some.field=true`.
Loading