Upgrading istio to v1.18.7 (#2739)

* Upgrading isitio to v1.18.7 Signed-off-by: biswajit-9776 <[email protected]> * Upgraded cni to v.1.18.7 Signed-off-by: biswajit-9776 <[email protected]> --------- Signed-off-by: biswajit-9776 <[email protected]>
kubeflow · Jun 4, 2024 · 96ce068 · 96ce068
1 parent 08937fd
commit 96ce068
Show file tree

Hide file tree

Showing 69 changed files with 1,246 additions and 2,196 deletions.
diff --git a/.github/workflows/kserve_cni_test.yaml b/.github/workflows/kserve_cni_test.yaml
@@ -6,7 +6,7 @@ on:
       - tests/gh-actions/kind-cluster.yaml
       - tests/gh-actions/install_kind.sh
       - tests/gh-actions/install_kustomize.sh
-      - common/istio-cni-1-17/**
+      - common/istio-cni-1-18/**
       - tests/gh-actions/install_cert_manager.sh
       - common/cert-manager/**
       - tests/gh-actions/install_knative-cni.sh

diff --git a/.github/workflows/notebook_controller_m2m_test.yaml b/.github/workflows/notebook_controller_m2m_test.yaml
@@ -38,7 +38,7 @@ jobs:
       run: ./tests/gh-actions/install_istio_with_ext_auth.sh*
 
     - name: Install kubeflow-istio-resources
-      run: kustomize build common/istio-1-17/kubeflow-istio-resources/base | kubectl apply -f -
+      run: kustomize build common/istio-1-18/kubeflow-istio-resources/base | kubectl apply -f -
 
     - name: Install KF Multi Tenancy
       run: ./tests/gh-actions/install_multi_tenancy.sh

diff --git a/.github/workflows/pipeline_test.yaml b/.github/workflows/pipeline_test.yaml
@@ -49,7 +49,7 @@ jobs:
         run: ./tests/gh-actions/install_multi_tenancy.sh
 
       - name: Install kubeflow-istio-resources
-        run: kustomize build common/istio-1-17/kubeflow-istio-resources/base | kubectl apply -f -
+        run: kustomize build common/istio-1-18/kubeflow-istio-resources/base | kubectl apply -f -
 
       - name: Create KF Profile
         run: kustomize build common/user-namespace/base | kubectl apply -f -

diff --git a/README.md b/README.md
@@ -65,7 +65,7 @@ used from the different projects of Kubeflow:
 
 | Component | Local Manifests Path | Upstream Revision |
 | - | - | - |
-| Istio | common/istio-1-17 | [1.17.3](https://github.com/istio/istio/releases/tag/1.17.3) |
+| Istio | common/istio-1-18 | [1.18.7](https://github.com/istio/istio/releases/tag/1.18.7) |
 | Knative | common/knative/knative-serving <br /> common/knative/knative-eventing | [v1.12.4](https://github.com/knative/serving/releases/tag/knative-v1.12.4) <br /> [v1.12.6](https://github.com/knative/eventing/releases/tag/knative-v1.12.6) |
 | Cert Manager | common/cert-manager | [1.14.5](https://github.com/cert-manager/cert-manager/releases/tag/v1.12.2) |
 
@@ -209,10 +209,10 @@ Install Istio:
 
 ```sh
 echo "Installing Istio configured with external authorization..."
-cd common/istio-1-17
-kustomize build common/istio-1-17/istio-crds/base | kubectl apply -f -
-kustomize build common/istio-1-17/istio-namespace/base | kubectl apply -f -
-kustomize build common/istio-1-17/istio-install/overlays/oauth2-proxy | kubectl apply -f -
+cd common/istio-1-18
+kustomize build common/istio-1-18/istio-crds/base | kubectl apply -f -
+kustomize build common/istio-1-18/istio-namespace/base | kubectl apply -f -
+kustomize build common/istio-1-18/istio-install/overlays/oauth2-proxy | kubectl apply -f -
 
 echo "Waiting for all Istio Pods to become ready..."
 kubectl wait --for=condition=Ready pods --all -n istio-system --timeout 300s
@@ -248,7 +248,7 @@ Install Knative Serving:
 
 ```sh
 kustomize build common/knative/knative-serving/overlays/gateways | kubectl apply -f -
-kustomize build common/istio-1-17/cluster-local-gateway/base | kubectl apply -f -
+kustomize build common/istio-1-18/cluster-local-gateway/base | kubectl apply -f -
 ```
 
 Optionally, you can install Knative Eventing which can be used for inference request logging:

diff --git a/common/istio-1-17/README.md → common/istio-1-18/README.md b/common/istio-1-17/README.md → common/istio-1-18/README.md
diff --git a/...l-gateway/base/cluster-local-gateway.yaml → ...l-gateway/base/cluster-local-gateway.yaml b/...l-gateway/base/cluster-local-gateway.yaml → ...l-gateway/base/cluster-local-gateway.yaml
@@ -35,6 +35,7 @@ spec:
   template:
     metadata:
       annotations:
+        istio.io/rev: default
         prometheus.io/path: /stats/prometheus
         prometheus.io/port: '15020'
         prometheus.io/scrape: 'true'
@@ -99,6 +100,10 @@ spec:
             fieldRef:
               apiVersion: v1
               fieldPath: status.hostIP
+        - name: ISTIO_CPU_LIMIT
+          valueFrom:
+            resourceFieldRef:
+              resource: limits.cpu
         - name: SERVICE_ACCOUNT
           valueFrom:
             fieldRef:
@@ -120,7 +125,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
-        image: docker.io/istio/proxyv2:1.17.5
+        image: docker.io/istio/proxyv2:1.18.7
         name: istio-proxy
         ports:
         - containerPort: 15020

diff --git a/...way/base/gateway-authorizationpolicy.yaml → ...way/base/gateway-authorizationpolicy.yaml b/...way/base/gateway-authorizationpolicy.yaml → ...way/base/gateway-authorizationpolicy.yaml
diff --git a/...7/cluster-local-gateway/base/gateway.yaml → ...8/cluster-local-gateway/base/gateway.yaml b/...7/cluster-local-gateway/base/gateway.yaml → ...8/cluster-local-gateway/base/gateway.yaml
diff --git a/...ter-local-gateway/base/kustomization.yaml → ...ter-local-gateway/base/kustomization.yaml b/...ter-local-gateway/base/kustomization.yaml → ...ter-local-gateway/base/kustomization.yaml
diff --git a/...ocal-gateway/base/patches/remove-pdb.yaml → ...ocal-gateway/base/patches/remove-pdb.yaml b/...ocal-gateway/base/patches/remove-pdb.yaml → ...ocal-gateway/base/patches/remove-pdb.yaml
diff --git a/common/istio-1-17/istio-crds/base/crd.yaml → common/istio-1-18/istio-crds/base/crd.yaml b/common/istio-1-17/istio-crds/base/crd.yaml → common/istio-1-18/istio-crds/base/crd.yaml
diff --git a/...o-1-17/istio-crds/base/kustomization.yaml → ...o-1-18/istio-crds/base/kustomization.yaml b/...o-1-17/istio-crds/base/kustomization.yaml → ...o-1-18/istio-crds/base/kustomization.yaml
diff --git a/...ll/base/deny_all_authorizationpolicy.yaml → ...ll/base/deny_all_authorizationpolicy.yaml b/...ll/base/deny_all_authorizationpolicy.yaml → ...ll/base/deny_all_authorizationpolicy.yaml
diff --git a/...stio-1-17/istio-install/base/gateway.yaml → ...stio-1-18/istio-install/base/gateway.yaml b/...stio-1-17/istio-install/base/gateway.yaml → ...stio-1-18/istio-install/base/gateway.yaml
diff --git a/...all/base/gateway_authorizationpolicy.yaml → ...all/base/gateway_authorizationpolicy.yaml b/...all/base/gateway_authorizationpolicy.yaml → ...all/base/gateway_authorizationpolicy.yaml