diff --git a/Makefile.core.mk b/Makefile.core.mk index cd3f40fda..224796637 100644 --- a/Makefile.core.mk +++ b/Makefile.core.mk @@ -559,7 +559,7 @@ OPM_VERSION ?= v1.60.0 OLM_VERSION ?= v0.34.0 GITLEAKS_VERSION ?= v8.28.0 ISTIOCTL_VERSION ?= 1.26.2 -RUNME_VERSION ?= 3.15.3 +RUNME_VERSION ?= 3.15.4 MISSPELL_VERSION ?= v0.3.4 .PHONY: helm $(HELM) diff --git a/api/v1/istio_types.go b/api/v1/istio_types.go index ee567c06e..6945c6014 100644 --- a/api/v1/istio_types.go +++ b/api/v1/istio_types.go @@ -37,9 +37,9 @@ const ( type IstioSpec struct { // +sail:version // Defines the version of Istio to install. - // Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. - // +operator-sdk:csv:customresourcedefinitions:type=spec,order=1,displayName="Istio Version",xDescriptors={"urn:alm:descriptor:com.tectonic.ui:fieldGroup:General", "urn:alm:descriptor:com.tectonic.ui:select:v1.27-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.1", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.26-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.4", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.3", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.2", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.0", "urn:alm:descriptor:com.tectonic.ui:select:master", "urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.423eb7cf"} - // +kubebuilder:validation:Enum=v1.27-latest;v1.27.1;v1.27.0;v1.26-latest;v1.26.4;v1.26.3;v1.26.2;v1.26.0;v1.25-latest;v1.25.5;v1.25.4;v1.25.3;v1.25.2;v1.25.1;v1.24-latest;v1.24.6;v1.24.5;v1.24.4;v1.24.3;v1.24.2;v1.24.1;v1.24.0;v1.23-latest;v1.23.6;v1.23.5;v1.23.4;v1.23.3;v1.23.2;v1.22-latest;v1.22.8;v1.22.7;v1.22.6;v1.22.5;v1.21.6;master;v1.28-alpha.423eb7cf + // Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. + // +operator-sdk:csv:customresourcedefinitions:type=spec,order=1,displayName="Istio Version",xDescriptors={"urn:alm:descriptor:com.tectonic.ui:fieldGroup:General", "urn:alm:descriptor:com.tectonic.ui:select:v1.27-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.1", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.26-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.4", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.3", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.2", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.0", "urn:alm:descriptor:com.tectonic.ui:select:master", "urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.4b0fdcfb"} + // +kubebuilder:validation:Enum=v1.27-latest;v1.27.1;v1.27.0;v1.26-latest;v1.26.4;v1.26.3;v1.26.2;v1.26.0;v1.25-latest;v1.25.5;v1.25.4;v1.25.3;v1.25.2;v1.25.1;v1.24-latest;v1.24.6;v1.24.5;v1.24.4;v1.24.3;v1.24.2;v1.24.1;v1.24.0;v1.23-latest;v1.23.6;v1.23.5;v1.23.4;v1.23.3;v1.23.2;v1.22-latest;v1.22.8;v1.22.7;v1.22.6;v1.22.5;v1.21.6;master;v1.28-alpha.4b0fdcfb // +kubebuilder:default=v1.27.1 Version string `json:"version"` diff --git a/api/v1/istiocni_types.go b/api/v1/istiocni_types.go index aaf292842..f6fec10f3 100644 --- a/api/v1/istiocni_types.go +++ b/api/v1/istiocni_types.go @@ -28,9 +28,9 @@ const ( type IstioCNISpec struct { // +sail:version // Defines the version of Istio to install. - // Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. - // +operator-sdk:csv:customresourcedefinitions:type=spec,order=1,displayName="Istio Version",xDescriptors={"urn:alm:descriptor:com.tectonic.ui:fieldGroup:General", "urn:alm:descriptor:com.tectonic.ui:select:v1.27-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.1", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.26-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.4", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.3", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.2", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.0", "urn:alm:descriptor:com.tectonic.ui:select:master", "urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.423eb7cf"} - // +kubebuilder:validation:Enum=v1.27-latest;v1.27.1;v1.27.0;v1.26-latest;v1.26.4;v1.26.3;v1.26.2;v1.26.0;v1.25-latest;v1.25.5;v1.25.4;v1.25.3;v1.25.2;v1.25.1;v1.24-latest;v1.24.6;v1.24.5;v1.24.4;v1.24.3;v1.24.2;v1.24.1;v1.24.0;v1.23-latest;v1.23.6;v1.23.5;v1.23.4;v1.23.3;v1.23.2;v1.22-latest;v1.22.8;v1.22.7;v1.22.6;v1.22.5;v1.21.6;master;v1.28-alpha.423eb7cf + // Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. + // +operator-sdk:csv:customresourcedefinitions:type=spec,order=1,displayName="Istio Version",xDescriptors={"urn:alm:descriptor:com.tectonic.ui:fieldGroup:General", "urn:alm:descriptor:com.tectonic.ui:select:v1.27-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.1", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.26-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.4", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.3", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.2", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.0", "urn:alm:descriptor:com.tectonic.ui:select:master", "urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.4b0fdcfb"} + // +kubebuilder:validation:Enum=v1.27-latest;v1.27.1;v1.27.0;v1.26-latest;v1.26.4;v1.26.3;v1.26.2;v1.26.0;v1.25-latest;v1.25.5;v1.25.4;v1.25.3;v1.25.2;v1.25.1;v1.24-latest;v1.24.6;v1.24.5;v1.24.4;v1.24.3;v1.24.2;v1.24.1;v1.24.0;v1.23-latest;v1.23.6;v1.23.5;v1.23.4;v1.23.3;v1.23.2;v1.22-latest;v1.22.8;v1.22.7;v1.22.6;v1.22.5;v1.21.6;master;v1.28-alpha.4b0fdcfb // +kubebuilder:default=v1.27.1 Version string `json:"version"` diff --git a/api/v1/istiorevision_types.go b/api/v1/istiorevision_types.go index d84e2f80d..57418c8f1 100644 --- a/api/v1/istiorevision_types.go +++ b/api/v1/istiorevision_types.go @@ -30,9 +30,9 @@ const ( type IstioRevisionSpec struct { // +sail:version // Defines the version of Istio to install. - // Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.423eb7cf. - // +operator-sdk:csv:customresourcedefinitions:type=spec,order=1,displayName="Istio Version",xDescriptors={"urn:alm:descriptor:com.tectonic.ui:fieldGroup:General", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.1", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.4", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.3", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.2", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.423eb7cf"} - // +kubebuilder:validation:Enum=v1.27.1;v1.27.0;v1.26.4;v1.26.3;v1.26.2;v1.26.0;v1.25.5;v1.25.4;v1.25.3;v1.25.2;v1.25.1;v1.24.6;v1.24.5;v1.24.4;v1.24.3;v1.24.2;v1.24.1;v1.24.0;v1.23.6;v1.23.5;v1.23.4;v1.23.3;v1.23.2;v1.22.8;v1.22.7;v1.22.6;v1.22.5;v1.21.6;v1.28-alpha.423eb7cf + // Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.4b0fdcfb. + // +operator-sdk:csv:customresourcedefinitions:type=spec,order=1,displayName="Istio Version",xDescriptors={"urn:alm:descriptor:com.tectonic.ui:fieldGroup:General", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.1", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.4", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.3", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.2", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.4b0fdcfb"} + // +kubebuilder:validation:Enum=v1.27.1;v1.27.0;v1.26.4;v1.26.3;v1.26.2;v1.26.0;v1.25.5;v1.25.4;v1.25.3;v1.25.2;v1.25.1;v1.24.6;v1.24.5;v1.24.4;v1.24.3;v1.24.2;v1.24.1;v1.24.0;v1.23.6;v1.23.5;v1.23.4;v1.23.3;v1.23.2;v1.22.8;v1.22.7;v1.22.6;v1.22.5;v1.21.6;v1.28-alpha.4b0fdcfb Version string `json:"version"` // Namespace to which the Istio components should be installed. diff --git a/api/v1/values_types.gen.go b/api/v1/values_types.gen.go index 7d49684e8..9cd36e0bf 100644 --- a/api/v1/values_types.gen.go +++ b/api/v1/values_types.gen.go @@ -24,6 +24,16 @@ import ( intstr "k8s.io/apimachinery/pkg/util/intstr" ) +// +kubebuilder:validation:Enum=undefined;all;cluster;namespace +type ResourceScope string + +const ( + ResourceScopeUndefined ResourceScope = "undefined" + ResourceScopeAll ResourceScope = "all" + ResourceScopeCluster ResourceScope = "cluster" + ResourceScopeNamespace ResourceScope = "namespace" +) + // Mode for the ingress controller. // +kubebuilder:validation:Enum=UNSPECIFIED;DEFAULT;STRICT;OFF type IngressControllerMode string @@ -442,7 +452,10 @@ type GlobalConfig struct { // Specifies whether native nftables rules should be used instead of iptables rules for traffic redirection. NativeNftables *bool `json:"nativeNftables,omitempty"` // Settings related to Kubernetes NetworkPolicy. - NetworkPolicy *NetworkPolicyConfig `json:"networkPolicy,omitempty"` // The next available key is 76 + NetworkPolicy *NetworkPolicyConfig `json:"networkPolicy,omitempty"` + // Specifies resource scope for discovery selectors. + // This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + ResourceScope ResourceScope `json:"resourceScope,omitempty"` // The next available key is 77 } @@ -1154,7 +1167,7 @@ const filePkgApisValuesTypesProtoRawDesc = "" + "\x14istio_ingressgateway\x18\x04 \x01(\v2-.istio.operator.v1alpha1.IngressGatewayConfigR\x14istio-ingressgateway\x12@\n" + "\x0fsecurityContext\x18\n" + " \x01(\v2\x16.google.protobuf.ValueR\x0fsecurityContext\x12>\n" + - "\x0eseccompProfile\x18\f \x01(\v2\x16.google.protobuf.ValueR\x0eseccompProfile\"\xdf\x13\n" + + "\x0eseccompProfile\x18\f \x01(\v2\x16.google.protobuf.ValueR\x0eseccompProfile\"\xad\x14\n" + "\fGlobalConfig\x12;\n" + "\x04arch\x18\x01 \x01(\v2#.istio.operator.v1alpha1.ArchConfigB\x02\x18\x01R\x04arch\x12 \n" + "\vcertSigners\x18D \x03(\tR\vcertSigners\x12F\n" + @@ -1204,7 +1217,8 @@ const filePkgApisValuesTypesProtoRawDesc = "" + "\bwaypoint\x18H \x01(\v2'.istio.operator.v1alpha1.WaypointConfigR\bwaypoint\x12(\n" + "\x0ftrustBundleName\x18I \x01(\tR\x0ftrustBundleName\x12B\n" + "\x0enativeNftables\x18J \x01(\v2\x1a.google.protobuf.BoolValueR\x0enativeNftables\x12R\n" + - "\rnetworkPolicy\x18K \x01(\v2,.istio.operator.v1alpha1.NetworkPolicyConfigR\rnetworkPolicy\"-\n" + + "\rnetworkPolicy\x18K \x01(\v2,.istio.operator.v1alpha1.NetworkPolicyConfigR\rnetworkPolicy\x12L\n" + + "\rresourceScope\x18L \x01(\x0e2&.istio.operator.v1alpha1.ResourceScopeR\rresourceScope\"-\n" + "\tSTSConfig\x12 \n" + "\vservicePort\x18\x01 \x01(\rR\vservicePort\"R\n" + "\fIstiodConfig\x12B\n" + @@ -1463,7 +1477,12 @@ const filePkgApisValuesTypesProtoRawDesc = "" + "toleration\x18\x05 \x03(\v2\x1e.k8s.io.api.core.v1.TolerationR\n" + "toleration\"K\n" + "\x13NetworkPolicyConfig\x124\n" + - "\aenabled\x18\x01 \x01(\v2\x1a.google.protobuf.BoolValueR\aenabled*J\n" + + "\aenabled\x18\x01 \x01(\v2\x1a.google.protobuf.BoolValueR\aenabled*C\n" + + "\rResourceScope\x12\r\n" + + "\tundefined\x10\x00\x12\a\n" + + "\x03all\x10\x01\x12\v\n" + + "\acluster\x10\x02\x12\r\n" + + "\tnamespace\x10\x03*J\n" + "\x15ingressControllerMode\x12\x0f\n" + "\vUNSPECIFIED\x10\x00\x12\v\n" + "\aDEFAULT\x10\x01\x12\n" + diff --git a/api/v1alpha1/ztunnel_types.go b/api/v1alpha1/ztunnel_types.go index 557891d3a..5a8b61fa5 100644 --- a/api/v1alpha1/ztunnel_types.go +++ b/api/v1alpha1/ztunnel_types.go @@ -29,9 +29,9 @@ const ( type ZTunnelSpec struct { // +sail:version // Defines the version of Istio to install. - // Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.423eb7cf. - // +operator-sdk:csv:customresourcedefinitions:type=spec,order=1,displayName="Istio Version",xDescriptors={"urn:alm:descriptor:com.tectonic.ui:fieldGroup:General", "urn:alm:descriptor:com.tectonic.ui:select:v1.27-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.1", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.26-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.4", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.3", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.2", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.25-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.24-latest", "urn:alm:descriptor:com.tectonic.ui:select:master", "urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.423eb7cf"} - // +kubebuilder:validation:Enum=v1.27-latest;v1.27.1;v1.27.0;v1.26-latest;v1.26.4;v1.26.3;v1.26.2;v1.26.0;v1.25-latest;v1.24-latest;master;v1.28-alpha.423eb7cf + // Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.4b0fdcfb. + // +operator-sdk:csv:customresourcedefinitions:type=spec,order=1,displayName="Istio Version",xDescriptors={"urn:alm:descriptor:com.tectonic.ui:fieldGroup:General", "urn:alm:descriptor:com.tectonic.ui:select:v1.27-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.1", "urn:alm:descriptor:com.tectonic.ui:select:v1.27.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.26-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.4", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.3", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.2", "urn:alm:descriptor:com.tectonic.ui:select:v1.26.0", "urn:alm:descriptor:com.tectonic.ui:select:v1.25-latest", "urn:alm:descriptor:com.tectonic.ui:select:v1.24-latest", "urn:alm:descriptor:com.tectonic.ui:select:master", "urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.4b0fdcfb"} + // +kubebuilder:validation:Enum=v1.27-latest;v1.27.1;v1.27.0;v1.26-latest;v1.26.4;v1.26.3;v1.26.2;v1.26.0;v1.25-latest;v1.24-latest;master;v1.28-alpha.4b0fdcfb // +kubebuilder:default=v1.27.1 Version string `json:"version"` diff --git a/bundle/manifests/sailoperator.clusterserviceversion.yaml b/bundle/manifests/sailoperator.clusterserviceversion.yaml index a4cfdc0c8..568426f3d 100644 --- a/bundle/manifests/sailoperator.clusterserviceversion.yaml +++ b/bundle/manifests/sailoperator.clusterserviceversion.yaml @@ -34,7 +34,7 @@ metadata: capabilities: Seamless Upgrades categories: OpenShift Optional, Integration & Delivery, Networking, Security containerImage: quay.io/sail-dev/sail-operator:1.28-latest - createdAt: "2025-10-09T05:05:24Z" + createdAt: "2025-10-11T05:05:11Z" description: The Sail Operator manages the lifecycle of your Istio control plane. It provides custom resources for you to deploy and manage your control plane components. features.operators.openshift.io/cnf: "false" features.operators.openshift.io/cni: "true" @@ -165,7 +165,7 @@ spec: specDescriptors: - description: |- Defines the version of Istio to install. - Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. + Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. displayName: Istio Version path: version x-descriptors: @@ -179,7 +179,7 @@ spec: - urn:alm:descriptor:com.tectonic.ui:select:v1.26.2 - urn:alm:descriptor:com.tectonic.ui:select:v1.26.0 - urn:alm:descriptor:com.tectonic.ui:select:master - - urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.423eb7cf + - urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.4b0fdcfb - description: Namespace to which the Istio CNI component should be installed. Note that this field is immutable. displayName: Namespace path: namespace @@ -217,7 +217,7 @@ spec: specDescriptors: - description: |- Defines the version of Istio to install. - Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.423eb7cf. + Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.4b0fdcfb. displayName: Istio Version path: version x-descriptors: @@ -228,7 +228,7 @@ spec: - urn:alm:descriptor:com.tectonic.ui:select:v1.26.3 - urn:alm:descriptor:com.tectonic.ui:select:v1.26.2 - urn:alm:descriptor:com.tectonic.ui:select:v1.26.0 - - urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.423eb7cf + - urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.4b0fdcfb - description: Namespace to which the Istio components should be installed. displayName: Namespace path: namespace @@ -263,7 +263,7 @@ spec: - urn:alm:descriptor:com.tectonic.ui:select:RevisionBased - description: |- Defines the version of Istio to install. - Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. + Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. displayName: Istio Version path: version x-descriptors: @@ -277,7 +277,7 @@ spec: - urn:alm:descriptor:com.tectonic.ui:select:v1.26.2 - urn:alm:descriptor:com.tectonic.ui:select:v1.26.0 - urn:alm:descriptor:com.tectonic.ui:select:master - - urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.423eb7cf + - urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.4b0fdcfb - description: |- Defines how many seconds the operator should wait before removing a non-active revision after all the workloads have stopped using it. You may want to set this value on the order of minutes. @@ -333,7 +333,7 @@ spec: specDescriptors: - description: |- Defines the version of Istio to install. - Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.423eb7cf. + Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.4b0fdcfb. displayName: Istio Version path: version x-descriptors: @@ -349,7 +349,7 @@ spec: - urn:alm:descriptor:com.tectonic.ui:select:v1.25-latest - urn:alm:descriptor:com.tectonic.ui:select:v1.24-latest - urn:alm:descriptor:com.tectonic.ui:select:master - - urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.423eb7cf + - urn:alm:descriptor:com.tectonic.ui:select:v1.28-alpha.4b0fdcfb - description: Namespace to which the Istio ztunnel component should be installed. displayName: Namespace path: namespace @@ -381,7 +381,7 @@ spec: - v1.26.2 - v1.26.0 - master - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb [See this page](https://github.com/istio-ecosystem/sail-operator/blob/main/bundle/README.md) for instructions on how to use it. displayName: Sail Operator @@ -697,10 +697,10 @@ spec: images.v1_27_1.istiod: gcr.io/istio-release/pilot:1.27.1 images.v1_27_1.proxy: gcr.io/istio-release/proxyv2:1.27.1 images.v1_27_1.ztunnel: gcr.io/istio-release/ztunnel:1.27.1 - images.v1_28-alpha_423eb7cf.cni: gcr.io/istio-testing/install-cni:1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 - images.v1_28-alpha_423eb7cf.istiod: gcr.io/istio-testing/pilot:1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 - images.v1_28-alpha_423eb7cf.proxy: gcr.io/istio-testing/proxyv2:1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 - images.v1_28-alpha_423eb7cf.ztunnel: gcr.io/istio-testing/ztunnel:1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 + images.v1_28-alpha_4b0fdcfb.cni: gcr.io/istio-testing/install-cni:1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d + images.v1_28-alpha_4b0fdcfb.istiod: gcr.io/istio-testing/pilot:1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d + images.v1_28-alpha_4b0fdcfb.proxy: gcr.io/istio-testing/proxyv2:1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d + images.v1_28-alpha_4b0fdcfb.ztunnel: gcr.io/istio-testing/ztunnel:1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d kubectl.kubernetes.io/default-container: sail-operator labels: app.kubernetes.io/created-by: sailoperator diff --git a/bundle/manifests/sailoperator.io_istiocnis.yaml b/bundle/manifests/sailoperator.io_istiocnis.yaml index 78f0f1822..589f0a7ad 100644 --- a/bundle/manifests/sailoperator.io_istiocnis.yaml +++ b/bundle/manifests/sailoperator.io_istiocnis.yaml @@ -1466,7 +1466,7 @@ spec: default: v1.27.1 description: |- Defines the version of Istio to install. - Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. + Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. enum: - v1.27-latest - v1.27.1 @@ -1503,7 +1503,7 @@ spec: - v1.22.5 - v1.21.6 - master - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb type: string required: - namespace diff --git a/bundle/manifests/sailoperator.io_istiorevisions.yaml b/bundle/manifests/sailoperator.io_istiorevisions.yaml index e5bd0a84f..302dff026 100644 --- a/bundle/manifests/sailoperator.io_istiorevisions.yaml +++ b/bundle/manifests/sailoperator.io_istiorevisions.yaml @@ -1113,6 +1113,16 @@ spec: description: Specifies the Istio control plane’s pilot Pod IP address or remote cluster DNS resolvable hostname. type: string + resourceScope: + description: |- + Specifies resource scope for discovery selectors. + This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + enum: + - undefined + - all + - cluster + - namespace + type: string revision: description: Configures the revision this control plane is a part of @@ -9993,7 +10003,7 @@ spec: version: description: |- Defines the version of Istio to install. - Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.423eb7cf. + Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.4b0fdcfb. enum: - v1.27.1 - v1.27.0 @@ -10023,7 +10033,7 @@ spec: - v1.22.6 - v1.22.5 - v1.21.6 - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb type: string required: - namespace diff --git a/bundle/manifests/sailoperator.io_istios.yaml b/bundle/manifests/sailoperator.io_istios.yaml index 9586684b0..73389c4b6 100644 --- a/bundle/manifests/sailoperator.io_istios.yaml +++ b/bundle/manifests/sailoperator.io_istios.yaml @@ -1186,6 +1186,16 @@ spec: description: Specifies the Istio control plane’s pilot Pod IP address or remote cluster DNS resolvable hostname. type: string + resourceScope: + description: |- + Specifies resource scope for discovery selectors. + This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + enum: + - undefined + - all + - cluster + - namespace + type: string revision: description: Configures the revision this control plane is a part of @@ -10067,7 +10077,7 @@ spec: default: v1.27.1 description: |- Defines the version of Istio to install. - Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. + Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. enum: - v1.27-latest - v1.27.1 @@ -10104,7 +10114,7 @@ spec: - v1.22.5 - v1.21.6 - master - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb type: string required: - namespace diff --git a/bundle/manifests/sailoperator.io_ztunnels.yaml b/bundle/manifests/sailoperator.io_ztunnels.yaml index 66bc86c0a..94e365b5d 100644 --- a/bundle/manifests/sailoperator.io_ztunnels.yaml +++ b/bundle/manifests/sailoperator.io_ztunnels.yaml @@ -2382,7 +2382,7 @@ spec: default: v1.27.1 description: |- Defines the version of Istio to install. - Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.423eb7cf. + Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.4b0fdcfb. enum: - v1.27-latest - v1.27.1 @@ -2395,7 +2395,7 @@ spec: - v1.25-latest - v1.24-latest - master - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb type: string required: - namespace diff --git a/chart/crds/sailoperator.io_istiocnis.yaml b/chart/crds/sailoperator.io_istiocnis.yaml index 01fd90bcd..e589a1133 100644 --- a/chart/crds/sailoperator.io_istiocnis.yaml +++ b/chart/crds/sailoperator.io_istiocnis.yaml @@ -1466,7 +1466,7 @@ spec: default: v1.27.1 description: |- Defines the version of Istio to install. - Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. + Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. enum: - v1.27-latest - v1.27.1 @@ -1503,7 +1503,7 @@ spec: - v1.22.5 - v1.21.6 - master - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb type: string required: - namespace diff --git a/chart/crds/sailoperator.io_istiorevisions.yaml b/chart/crds/sailoperator.io_istiorevisions.yaml index 6b1b60a39..7d4e0567c 100644 --- a/chart/crds/sailoperator.io_istiorevisions.yaml +++ b/chart/crds/sailoperator.io_istiorevisions.yaml @@ -1113,6 +1113,16 @@ spec: description: Specifies the Istio control plane’s pilot Pod IP address or remote cluster DNS resolvable hostname. type: string + resourceScope: + description: |- + Specifies resource scope for discovery selectors. + This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + enum: + - undefined + - all + - cluster + - namespace + type: string revision: description: Configures the revision this control plane is a part of @@ -9993,7 +10003,7 @@ spec: version: description: |- Defines the version of Istio to install. - Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.423eb7cf. + Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.4b0fdcfb. enum: - v1.27.1 - v1.27.0 @@ -10023,7 +10033,7 @@ spec: - v1.22.6 - v1.22.5 - v1.21.6 - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb type: string required: - namespace diff --git a/chart/crds/sailoperator.io_istios.yaml b/chart/crds/sailoperator.io_istios.yaml index 54244db10..42198165b 100644 --- a/chart/crds/sailoperator.io_istios.yaml +++ b/chart/crds/sailoperator.io_istios.yaml @@ -1186,6 +1186,16 @@ spec: description: Specifies the Istio control plane’s pilot Pod IP address or remote cluster DNS resolvable hostname. type: string + resourceScope: + description: |- + Specifies resource scope for discovery selectors. + This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + enum: + - undefined + - all + - cluster + - namespace + type: string revision: description: Configures the revision this control plane is a part of @@ -10067,7 +10077,7 @@ spec: default: v1.27.1 description: |- Defines the version of Istio to install. - Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. + Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. enum: - v1.27-latest - v1.27.1 @@ -10104,7 +10114,7 @@ spec: - v1.22.5 - v1.21.6 - master - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb type: string required: - namespace diff --git a/chart/crds/sailoperator.io_ztunnels.yaml b/chart/crds/sailoperator.io_ztunnels.yaml index ce415d60f..129c90e5a 100644 --- a/chart/crds/sailoperator.io_ztunnels.yaml +++ b/chart/crds/sailoperator.io_ztunnels.yaml @@ -2382,7 +2382,7 @@ spec: default: v1.27.1 description: |- Defines the version of Istio to install. - Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.423eb7cf. + Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.4b0fdcfb. enum: - v1.27-latest - v1.27.1 @@ -2395,7 +2395,7 @@ spec: - v1.25-latest - v1.24-latest - master - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb type: string required: - namespace diff --git a/chart/values.yaml b/chart/values.yaml index f0b888228..495bfe21e 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -26,10 +26,10 @@ deployment: images.v1_26_0.istiod: gcr.io/istio-release/pilot:1.26.0 images.v1_26_0.proxy: gcr.io/istio-release/proxyv2:1.26.0 images.v1_26_0.cni: gcr.io/istio-release/install-cni:1.26.0 - images.v1_28-alpha_423eb7cf.ztunnel: gcr.io/istio-testing/ztunnel:1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 - images.v1_28-alpha_423eb7cf.istiod: gcr.io/istio-testing/pilot:1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 - images.v1_28-alpha_423eb7cf.proxy: gcr.io/istio-testing/proxyv2:1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 - images.v1_28-alpha_423eb7cf.cni: gcr.io/istio-testing/install-cni:1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 + images.v1_28-alpha_4b0fdcfb.ztunnel: gcr.io/istio-testing/ztunnel:1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d + images.v1_28-alpha_4b0fdcfb.istiod: gcr.io/istio-testing/pilot:1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d + images.v1_28-alpha_4b0fdcfb.proxy: gcr.io/istio-testing/proxyv2:1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d + images.v1_28-alpha_4b0fdcfb.cni: gcr.io/istio-testing/install-cni:1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d revisionHistoryLimit: 10 service: port: 8443 @@ -54,7 +54,7 @@ csv: - v1.26.2 - v1.26.0 - master - - v1.28-alpha.423eb7cf + - v1.28-alpha.4b0fdcfb [See this page](https://github.com/istio-ecosystem/sail-operator/blob/main/bundle/README.md) for instructions on how to use it. support: Community based diff --git a/docs/api-reference/sailoperator.io.md b/docs/api-reference/sailoperator.io.md index cbb01c040..261be601b 100644 --- a/docs/api-reference/sailoperator.io.md +++ b/docs/api-reference/sailoperator.io.md @@ -448,6 +448,7 @@ _Appears in:_ | `trustBundleName` _string_ | Select a custom name for istiod's CA Root Cert ConfigMap. | | | | `nativeNftables` _boolean_ | Specifies whether native nftables rules should be used instead of iptables rules for traffic redirection. | | | | `networkPolicy` _[NetworkPolicyConfig](#networkpolicyconfig)_ | Settings related to Kubernetes NetworkPolicy. | | | +| `resourceScope` _[ResourceScope](#resourcescope)_ | Specifies resource scope for discovery selectors. This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. | | Enum: [undefined all cluster namespace] | #### GlobalLoggingConfig @@ -658,7 +659,7 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | -| `version` _string_ | Defines the version of Istio to install. Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. | v1.27.1 | Enum: [v1.27-latest v1.27.1 v1.27.0 v1.26-latest v1.26.4 v1.26.3 v1.26.2 v1.26.0 v1.25-latest v1.25.5 v1.25.4 v1.25.3 v1.25.2 v1.25.1 v1.24-latest v1.24.6 v1.24.5 v1.24.4 v1.24.3 v1.24.2 v1.24.1 v1.24.0 v1.23-latest v1.23.6 v1.23.5 v1.23.4 v1.23.3 v1.23.2 v1.22-latest v1.22.8 v1.22.7 v1.22.6 v1.22.5 v1.21.6 master v1.28-alpha.423eb7cf] | +| `version` _string_ | Defines the version of Istio to install. Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. | v1.27.1 | Enum: [v1.27-latest v1.27.1 v1.27.0 v1.26-latest v1.26.4 v1.26.3 v1.26.2 v1.26.0 v1.25-latest v1.25.5 v1.25.4 v1.25.3 v1.25.2 v1.25.1 v1.24-latest v1.24.6 v1.24.5 v1.24.4 v1.24.3 v1.24.2 v1.24.1 v1.24.0 v1.23-latest v1.23.6 v1.23.5 v1.23.4 v1.23.3 v1.23.2 v1.22-latest v1.22.8 v1.22.7 v1.22.6 v1.22.5 v1.21.6 master v1.28-alpha.4b0fdcfb] | | `profile` _string_ | The built-in installation configuration profile to use. The 'default' profile is always applied. On OpenShift, the 'openshift' profile is also applied on top of 'default'. Must be one of: ambient, default, demo, empty, openshift, openshift-ambient, preview, remote, stable. | | Enum: [ambient default demo empty external openshift openshift-ambient preview remote stable] | | `namespace` _string_ | Namespace to which the Istio CNI component should be installed. Note that this field is immutable. | istio-cni | | | `values` _[CNIValues](#cnivalues)_ | Defines the values to be passed to the Helm charts when installing Istio CNI. | | | @@ -895,7 +896,7 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | -| `version` _string_ | Defines the version of Istio to install. Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.423eb7cf. | | Enum: [v1.27.1 v1.27.0 v1.26.4 v1.26.3 v1.26.2 v1.26.0 v1.25.5 v1.25.4 v1.25.3 v1.25.2 v1.25.1 v1.24.6 v1.24.5 v1.24.4 v1.24.3 v1.24.2 v1.24.1 v1.24.0 v1.23.6 v1.23.5 v1.23.4 v1.23.3 v1.23.2 v1.22.8 v1.22.7 v1.22.6 v1.22.5 v1.21.6 v1.28-alpha.423eb7cf] | +| `version` _string_ | Defines the version of Istio to install. Must be one of: v1.27.1, v1.27.0, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.28-alpha.4b0fdcfb. | | Enum: [v1.27.1 v1.27.0 v1.26.4 v1.26.3 v1.26.2 v1.26.0 v1.25.5 v1.25.4 v1.25.3 v1.25.2 v1.25.1 v1.24.6 v1.24.5 v1.24.4 v1.24.3 v1.24.2 v1.24.1 v1.24.0 v1.23.6 v1.23.5 v1.23.4 v1.23.3 v1.23.2 v1.22.8 v1.22.7 v1.22.6 v1.22.5 v1.21.6 v1.28-alpha.4b0fdcfb] | | `namespace` _string_ | Namespace to which the Istio components should be installed. | | | | `values` _[Values](#values)_ | Defines the values to be passed to the Helm charts when installing Istio. | | | @@ -1088,7 +1089,7 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | -| `version` _string_ | Defines the version of Istio to install. Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.423eb7cf. | v1.27.1 | Enum: [v1.27-latest v1.27.1 v1.27.0 v1.26-latest v1.26.4 v1.26.3 v1.26.2 v1.26.0 v1.25-latest v1.25.5 v1.25.4 v1.25.3 v1.25.2 v1.25.1 v1.24-latest v1.24.6 v1.24.5 v1.24.4 v1.24.3 v1.24.2 v1.24.1 v1.24.0 v1.23-latest v1.23.6 v1.23.5 v1.23.4 v1.23.3 v1.23.2 v1.22-latest v1.22.8 v1.22.7 v1.22.6 v1.22.5 v1.21.6 master v1.28-alpha.423eb7cf] | +| `version` _string_ | Defines the version of Istio to install. Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, master, v1.28-alpha.4b0fdcfb. | v1.27.1 | Enum: [v1.27-latest v1.27.1 v1.27.0 v1.26-latest v1.26.4 v1.26.3 v1.26.2 v1.26.0 v1.25-latest v1.25.5 v1.25.4 v1.25.3 v1.25.2 v1.25.1 v1.24-latest v1.24.6 v1.24.5 v1.24.4 v1.24.3 v1.24.2 v1.24.1 v1.24.0 v1.23-latest v1.23.6 v1.23.5 v1.23.4 v1.23.3 v1.23.2 v1.22-latest v1.22.8 v1.22.7 v1.22.6 v1.22.5 v1.21.6 master v1.28-alpha.4b0fdcfb] | | `updateStrategy` _[IstioUpdateStrategy](#istioupdatestrategy)_ | Defines the update strategy to use when the version in the Istio CR is updated. | \{ type:InPlace \} | | | `profile` _string_ | The built-in installation configuration profile to use. The 'default' profile is always applied. On OpenShift, the 'openshift' profile is also applied on top of 'default'. Must be one of: ambient, default, demo, empty, openshift, openshift-ambient, preview, remote, stable. | | Enum: [ambient default demo empty external openshift openshift-ambient preview remote stable] | | `namespace` _string_ | Namespace to which the Istio components should be installed. Note that this field is immutable. | istio-system | | @@ -2804,6 +2805,26 @@ _Appears in:_ | `pods` _integer_ | The hard limit on the number of pods in the namespace where the CNI DaemonSet is deployed. | | | +#### ResourceScope + +_Underlying type:_ _string_ + + + +_Validation:_ +- Enum: [undefined all cluster namespace] + +_Appears in:_ +- [GlobalConfig](#globalconfig) + +| Field | Description | +| --- | --- | +| `undefined` | | +| `all` | | +| `cluster` | | +| `namespace` | | + + #### RevisionSummary @@ -3511,7 +3532,7 @@ _Appears in:_ | Field | Description | Default | Validation | | --- | --- | --- | --- | -| `version` _string_ | Defines the version of Istio to install. Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.423eb7cf. | v1.27.1 | Enum: [v1.27-latest v1.27.1 v1.27.0 v1.26-latest v1.26.4 v1.26.3 v1.26.2 v1.26.0 v1.25-latest v1.24-latest master v1.28-alpha.423eb7cf] | +| `version` _string_ | Defines the version of Istio to install. Must be one of: v1.27-latest, v1.27.1, v1.27.0, v1.26-latest, v1.26.4, v1.26.3, v1.26.2, v1.26.0, v1.25-latest, v1.24-latest, master, v1.28-alpha.4b0fdcfb. | v1.27.1 | Enum: [v1.27-latest v1.27.1 v1.27.0 v1.26-latest v1.26.4 v1.26.3 v1.26.2 v1.26.0 v1.25-latest v1.24-latest master v1.28-alpha.4b0fdcfb] | | `profile` _string_ | The built-in installation configuration profile to use. The 'default' profile is 'ambient' and it is always applied. Must be one of: ambient, default, demo, empty, external, preview, remote, stable. | ambient | Enum: [ambient default demo empty external openshift-ambient openshift preview remote stable] | | `namespace` _string_ | Namespace to which the Istio ztunnel component should be installed. | ztunnel | | | `values` _[ZTunnelValues](#ztunnelvalues)_ | Defines the values to be passed to the Helm charts when installing Istio ztunnel. | | | diff --git a/go.mod b/go.mod index caf58aa9a..b04d8a3fd 100644 --- a/go.mod +++ b/go.mod @@ -27,13 +27,13 @@ require ( gopkg.in/yaml.v3 v3.0.1 helm.sh/helm/v3 v3.18.6 istio.io/client-go v1.26.0-alpha.0.0.20251008165617-23503832d0b8 - istio.io/istio v0.0.0-20251009010836-423eb7cf34db + istio.io/istio v0.0.0-20251010155537-4b0fdcfb9ab3 k8s.io/api v0.34.1 k8s.io/apiextensions-apiserver v0.34.1 k8s.io/apimachinery v0.34.1 k8s.io/cli-runtime v0.33.3 k8s.io/client-go v0.34.1 - sigs.k8s.io/controller-runtime v0.22.2 + sigs.k8s.io/controller-runtime v0.22.3 ) require ( diff --git a/go.sum b/go.sum index 11ecf105e..b713d7470 100644 --- a/go.sum +++ b/go.sum @@ -485,8 +485,8 @@ istio.io/api v1.26.0-alpha.0.0.20251008165320-6df984a78fb5 h1:tZVOnrhwDNrIEY5bkU istio.io/api v1.26.0-alpha.0.0.20251008165320-6df984a78fb5/go.mod h1:BD3qv/ekm16kvSgvSpuiDawgKhEwG97wx849CednJSg= istio.io/client-go v1.26.0-alpha.0.0.20251008165617-23503832d0b8 h1:EulEP5LnyzJsyaCx3izLvOvhQzgbSr5+A6eWj1lLJJY= istio.io/client-go v1.26.0-alpha.0.0.20251008165617-23503832d0b8/go.mod h1:cwUNksRtU8ujlPDLzSnwjNPge9pRevqwTXAlcceXYIw= -istio.io/istio v0.0.0-20251009010836-423eb7cf34db h1:YtGqcCxI0RtMMCXj/QpZtTad5XPE2VYhvRcv+P7qV9k= -istio.io/istio v0.0.0-20251009010836-423eb7cf34db/go.mod h1:3WOLTiy5ZW9AlHXwxfy7lfFfaC/8FeyiHzWv3xxo9KM= +istio.io/istio v0.0.0-20251010155537-4b0fdcfb9ab3 h1:/gjhlW4sII23z51DuL0jAUdM0rJp59DexyjmEHI1aGQ= +istio.io/istio v0.0.0-20251010155537-4b0fdcfb9ab3/go.mod h1:b2Pjj4VuUA0gGmb071EXmyyyw1hTHL6b9Tg5VVln0tQ= k8s.io/api v0.34.1 h1:jC+153630BMdlFukegoEL8E/yT7aLyQkIVuwhmwDgJM= k8s.io/api v0.34.1/go.mod h1:SB80FxFtXn5/gwzCoN6QCtPD7Vbu5w2n1S0J5gFfTYk= k8s.io/apiextensions-apiserver v0.34.1 h1:NNPBva8FNAPt1iSVwIE0FsdrVriRXMsaWFMqJbII2CI= @@ -513,8 +513,8 @@ oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc= oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o= sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.32.1 h1:Cf+ed5N8038zbsaXFO7mKQDi/+VcSRafb0jM84KX5so= sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.32.1/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw= -sigs.k8s.io/controller-runtime v0.22.2 h1:cK2l8BGWsSWkXz09tcS4rJh95iOLney5eawcK5A33r4= -sigs.k8s.io/controller-runtime v0.22.2/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8= +sigs.k8s.io/controller-runtime v0.22.3 h1:I7mfqz/a/WdmDCEnXmSPm8/b/yRTy6JsKKENTijTq8Y= +sigs.k8s.io/controller-runtime v0.22.3/go.mod h1:+QX1XUpTXN4mLoblf4tqr5CQcyHPAki2HLXqQMY6vh8= sigs.k8s.io/controller-tools v0.14.0 h1:rnNoCC5wSXlrNoBKKzL70LNJKIQKEzT6lloG6/LF73A= sigs.k8s.io/controller-tools v0.14.0/go.mod h1:TV7uOtNNnnR72SpzhStvPkoS/U5ir0nMudrkrC4M9Sc= sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg= diff --git a/pkg/istioversion/versions.yaml b/pkg/istioversion/versions.yaml index d62652d96..30f1460d9 100644 --- a/pkg/istioversion/versions.yaml +++ b/pkg/istioversion/versions.yaml @@ -136,15 +136,15 @@ versions: - name: v1.21.6 eol: true - name: master - ref: v1.28-alpha.423eb7cf - - name: v1.28-alpha.423eb7cf - version: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 + ref: v1.28-alpha.4b0fdcfb + - name: v1.28-alpha.4b0fdcfb + version: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d repo: https://github.com/istio/istio branch: master - commit: 423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 + commit: 4b0fdcfb9ab3a6241d254309036c8714501e669d charts: - - https://storage.googleapis.com/istio-build/dev/1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63/helm/base-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz - - https://storage.googleapis.com/istio-build/dev/1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63/helm/cni-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz - - https://storage.googleapis.com/istio-build/dev/1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63/helm/gateway-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz - - https://storage.googleapis.com/istio-build/dev/1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63/helm/istiod-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz - - https://storage.googleapis.com/istio-build/dev/1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63/helm/ztunnel-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz + - https://storage.googleapis.com/istio-build/dev/1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d/helm/base-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz + - https://storage.googleapis.com/istio-build/dev/1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d/helm/cni-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz + - https://storage.googleapis.com/istio-build/dev/1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d/helm/gateway-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz + - https://storage.googleapis.com/istio-build/dev/1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d/helm/istiod-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz + - https://storage.googleapis.com/istio-build/dev/1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d/helm/ztunnel-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz diff --git a/resources/v1.28-alpha.423eb7cf/base-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag b/resources/v1.28-alpha.423eb7cf/base-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag deleted file mode 100644 index 7c6037cf3..000000000 --- a/resources/v1.28-alpha.423eb7cf/base-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag +++ /dev/null @@ -1 +0,0 @@ -875617ef45d8a054817d7acffd862ac7 diff --git a/resources/v1.28-alpha.423eb7cf/cni-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag b/resources/v1.28-alpha.423eb7cf/cni-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag deleted file mode 100644 index 02463938b..000000000 --- a/resources/v1.28-alpha.423eb7cf/cni-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag +++ /dev/null @@ -1 +0,0 @@ -eca7499fb258b03d9e7993fb8e4f72d0 diff --git a/resources/v1.28-alpha.423eb7cf/commit b/resources/v1.28-alpha.423eb7cf/commit deleted file mode 100644 index a6a62f681..000000000 --- a/resources/v1.28-alpha.423eb7cf/commit +++ /dev/null @@ -1 +0,0 @@ -423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 diff --git a/resources/v1.28-alpha.423eb7cf/gateway-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag b/resources/v1.28-alpha.423eb7cf/gateway-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag deleted file mode 100644 index 0bcce5af1..000000000 --- a/resources/v1.28-alpha.423eb7cf/gateway-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag +++ /dev/null @@ -1 +0,0 @@ -e8e69941d55f4b009943a5541f3438be diff --git a/resources/v1.28-alpha.423eb7cf/istiod-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag b/resources/v1.28-alpha.423eb7cf/istiod-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag deleted file mode 100644 index 53d31ae01..000000000 --- a/resources/v1.28-alpha.423eb7cf/istiod-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag +++ /dev/null @@ -1 +0,0 @@ -8a0ac30d5fee734055942f5848c4eded diff --git a/resources/v1.28-alpha.423eb7cf/ztunnel-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag b/resources/v1.28-alpha.423eb7cf/ztunnel-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag deleted file mode 100644 index 3ba868146..000000000 --- a/resources/v1.28-alpha.423eb7cf/ztunnel-1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63.tgz.etag +++ /dev/null @@ -1 +0,0 @@ -3b038d4d3d266443c4180a714d7992cd diff --git a/resources/v1.28-alpha.4b0fdcfb/base-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag b/resources/v1.28-alpha.4b0fdcfb/base-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag new file mode 100644 index 000000000..4d7ae2c9c --- /dev/null +++ b/resources/v1.28-alpha.4b0fdcfb/base-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag @@ -0,0 +1 @@ +04e1f02d72a836dc0ef41ba50421079a diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/Chart.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/Chart.yaml similarity index 63% rename from resources/v1.28-alpha.423eb7cf/charts/base/Chart.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/Chart.yaml index 2f37e068f..1ebd56310 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/base/Chart.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/base/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +appVersion: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d description: Helm chart for deploying Istio cluster resources and CRDs icon: https://istio.io/latest/favicons/android-192x192.png keywords: @@ -7,4 +7,4 @@ keywords: name: base sources: - https://github.com/istio/istio -version: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +version: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/README.md b/resources/v1.28-alpha.4b0fdcfb/charts/base/README.md similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/README.md rename to resources/v1.28-alpha.4b0fdcfb/charts/base/README.md diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-ambient.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-ambient.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-ambient.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-ambient.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-compatibility-version-1.25.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-compatibility-version-1.25.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-compatibility-version-1.25.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-compatibility-version-1.25.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-compatibility-version-1.26.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-compatibility-version-1.26.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-compatibility-version-1.26.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-compatibility-version-1.26.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-compatibility-version-1.27.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-compatibility-version-1.27.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-compatibility-version-1.27.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-compatibility-version-1.27.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-demo.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-demo.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-demo.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-demo.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-gke.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-gke.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-gke.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-gke.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-k3d.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-k3d.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-k3d.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-k3d.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-k3s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-k3s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-k3s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-k3s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-microk8s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-microk8s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-microk8s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-microk8s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-minikube.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-minikube.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-minikube.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-minikube.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-openshift.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-openshift.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-platform-openshift.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-platform-openshift.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-preview.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-preview.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-preview.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-preview.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-remote.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-remote.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-remote.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-remote.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/files/profile-stable.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-stable.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/files/profile-stable.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/files/profile-stable.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/templates/NOTES.txt b/resources/v1.28-alpha.4b0fdcfb/charts/base/templates/NOTES.txt similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/templates/NOTES.txt rename to resources/v1.28-alpha.4b0fdcfb/charts/base/templates/NOTES.txt diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/templates/defaultrevision-validatingadmissionpolicy.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/templates/defaultrevision-validatingadmissionpolicy.yaml similarity index 94% rename from resources/v1.28-alpha.423eb7cf/charts/base/templates/defaultrevision-validatingadmissionpolicy.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/templates/defaultrevision-validatingadmissionpolicy.yaml index 2616b09c9..30049df98 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/base/templates/defaultrevision-validatingadmissionpolicy.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/base/templates/defaultrevision-validatingadmissionpolicy.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} {{- if and .Values.experimental.stableValidationPolicy (not (eq .Values.defaultRevision "")) }} apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingAdmissionPolicy @@ -51,3 +52,4 @@ spec: policyName: "stable-channel-default-policy.istio.io" validationActions: [Deny] {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/templates/defaultrevision-validatingwebhookconfiguration.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/templates/defaultrevision-validatingwebhookconfiguration.yaml similarity index 93% rename from resources/v1.28-alpha.423eb7cf/charts/base/templates/defaultrevision-validatingwebhookconfiguration.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/templates/defaultrevision-validatingwebhookconfiguration.yaml index 8cb76fd77..dcd16e964 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/base/templates/defaultrevision-validatingwebhookconfiguration.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/base/templates/defaultrevision-validatingwebhookconfiguration.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} {{- if not (eq .Values.defaultRevision "") }} apiVersion: admissionregistration.k8s.io/v1 kind: ValidatingWebhookConfiguration @@ -54,3 +55,4 @@ webhooks: sideEffects: None admissionReviewVersions: ["v1"] {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/templates/reader-serviceaccount.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/templates/reader-serviceaccount.yaml similarity index 87% rename from resources/v1.28-alpha.423eb7cf/charts/base/templates/reader-serviceaccount.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/templates/reader-serviceaccount.yaml index ba829a6bf..bb7a74ff4 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/base/templates/reader-serviceaccount.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/base/templates/reader-serviceaccount.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # This singleton service account aggregates reader permissions for the revisions in a given cluster # ATM this is a singleton per cluster with Istio installed, and is not revisioned. It maybe should be, # as otherwise compromising the token for this SA would give you access to *every* installed revision. @@ -18,3 +19,4 @@ metadata: release: {{ .Release.Name }} app.kubernetes.io/name: "istio-reader" {{- include "istio.labels" . | nindent 4 }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/templates/zzz_profile.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/templates/zzz_profile.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/base/templates/zzz_profile.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/templates/zzz_profile.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/base/values.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/base/values.yaml similarity index 80% rename from resources/v1.28-alpha.423eb7cf/charts/base/values.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/base/values.yaml index d18296f00..8353c57d6 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/base/values.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/base/values.yaml @@ -10,6 +10,14 @@ _internal_defaults_do_not_set: # Used to locate istiod. istioNamespace: istio-system + + # resourceScope controls what resources will be processed by helm. + # This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + # It can be one of: + # - all: all resources are processed + # - cluster: only cluster-scoped resources are processed + # - namespace: only namespace-scoped resources are processed + resourceScope: all base: # A list of CRDs to exclude. Requires `enableCRDTemplates` to be true. # Example: `excludedCRDs: ["envoyfilters.networking.istio.io"]`. diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/Chart.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/Chart.yaml similarity index 62% rename from resources/v1.28-alpha.423eb7cf/charts/cni/Chart.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/Chart.yaml index eef440747..921fd4552 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/cni/Chart.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/cni/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +appVersion: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d description: Helm chart for istio-cni components icon: https://istio.io/latest/favicons/android-192x192.png keywords: @@ -8,4 +8,4 @@ keywords: name: cni sources: - https://github.com/istio/istio -version: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +version: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/README.md b/resources/v1.28-alpha.4b0fdcfb/charts/cni/README.md similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/README.md rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/README.md diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-ambient.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-ambient.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-ambient.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-ambient.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-compatibility-version-1.25.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-compatibility-version-1.25.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-compatibility-version-1.25.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-compatibility-version-1.25.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-compatibility-version-1.26.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-compatibility-version-1.26.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-compatibility-version-1.26.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-compatibility-version-1.26.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-compatibility-version-1.27.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-compatibility-version-1.27.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-compatibility-version-1.27.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-compatibility-version-1.27.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-demo.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-demo.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-demo.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-demo.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-gke.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-gke.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-gke.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-gke.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-k3d.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-k3d.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-k3d.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-k3d.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-k3s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-k3s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-k3s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-k3s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-microk8s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-microk8s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-microk8s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-microk8s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-minikube.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-minikube.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-minikube.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-minikube.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-openshift.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-openshift.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-platform-openshift.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-platform-openshift.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-preview.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-preview.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-preview.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-preview.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-remote.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-remote.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-remote.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-remote.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-stable.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-stable.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/files/profile-stable.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/files/profile-stable.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/NOTES.txt b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/NOTES.txt similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/NOTES.txt rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/NOTES.txt diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/_helpers.tpl b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/_helpers.tpl similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/_helpers.tpl rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/_helpers.tpl diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/clusterrole.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/clusterrole.yaml similarity index 94% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/clusterrole.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/clusterrole.yaml index 1779e0bb1..51af4ce7f 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/clusterrole.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/clusterrole.yaml @@ -1,3 +1,5 @@ +# Created if cluster resources are not omitted +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: @@ -79,3 +81,4 @@ rules: resourceNames: ["{{ template "name" . }}-node"] verbs: ["get"] {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/clusterrolebinding.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/clusterrolebinding.yaml similarity index 92% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/clusterrolebinding.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/clusterrolebinding.yaml index 42fedab1f..60e3c28be 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/clusterrolebinding.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/clusterrolebinding.yaml @@ -1,3 +1,5 @@ +# Created if cluster resources are not omitted +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: @@ -61,3 +63,4 @@ roleRef: kind: ClusterRole name: {{ template "name" . }}-ambient {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/configmap-cni.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/configmap-cni.yaml similarity index 95% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/configmap-cni.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/configmap-cni.yaml index 6f6ef329a..98bc60ac0 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/configmap-cni.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/configmap-cni.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} kind: ConfigMap apiVersion: v1 metadata: @@ -39,3 +40,4 @@ data: {{ $key }}: "{{ $val }}" {{- end }} {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/daemonset.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/daemonset.yaml similarity index 98% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/daemonset.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/daemonset.yaml index 75f61c60a..6d1dda290 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/daemonset.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/daemonset.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # This manifest installs the Istio install-cni container, as well # as the Istio CNI plugin and config on # each master and worker node in a Kubernetes cluster. @@ -248,3 +249,4 @@ spec: type: DirectoryOrCreate # DirectoryOrCreate instead of Directory for the following reason - CNI may not bind mount this until a non-hostnetwork pod is scheduled on the node, # and we don't want to block CNI agent pod creation on waiting for the first non-hostnetwork pod. # Once the CNI does mount this, it will get populated and we're good. +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/network-attachment-definition.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/network-attachment-definition.yaml similarity index 74% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/network-attachment-definition.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/network-attachment-definition.yaml index 86a2eb7c0..37ef7c3e6 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/network-attachment-definition.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/network-attachment-definition.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} {{- if eq .Values.provider "multus" }} apiVersion: k8s.cni.cncf.io/v1 kind: NetworkAttachmentDefinition @@ -9,3 +10,4 @@ metadata: app.kubernetes.io/name: {{ template "name" . }} {{- include "istio.labels" . | nindent 4 }} {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/resourcequota.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/resourcequota.yaml similarity index 81% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/resourcequota.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/resourcequota.yaml index 9a6d61ff9..2e0be5ab4 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/resourcequota.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/resourcequota.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} {{- if .Values.resourceQuotas.enabled }} apiVersion: v1 kind: ResourceQuota @@ -17,3 +18,4 @@ spec: values: - system-node-critical {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/serviceaccount.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/serviceaccount.yaml similarity index 82% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/serviceaccount.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/serviceaccount.yaml index 3193d7b74..17c8e64a9 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/serviceaccount.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/serviceaccount.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} apiVersion: v1 kind: ServiceAccount {{- if .Values.global.imagePullSecrets }} @@ -16,3 +17,4 @@ metadata: operator.istio.io/component: "Cni" app.kubernetes.io/name: {{ template "name" . }} {{- include "istio.labels" . | nindent 4 }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/zzy_descope_legacy.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/zzy_descope_legacy.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/zzy_descope_legacy.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/zzy_descope_legacy.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/templates/zzz_profile.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/zzz_profile.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/cni/templates/zzz_profile.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/templates/zzz_profile.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/cni/values.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/cni/values.yaml similarity index 92% rename from resources/v1.28-alpha.423eb7cf/charts/cni/values.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/cni/values.yaml index b1aee17ea..61e61cfdf 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/cni/values.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/cni/values.yaml @@ -147,7 +147,7 @@ _internal_defaults_do_not_set: hub: gcr.io/istio-testing # Default tag for Istio images. - tag: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 + tag: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d # Variant of the image to use. # Currently supported are: [debug, distroless] @@ -180,5 +180,13 @@ _internal_defaults_do_not_set: # In order to use native nftable rules instead of iptable rules, set this flag to true. nativeNftables: false + # resourceScope controls what resources will be processed by helm. + # This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + # It can be one of: + # - all: all resources are processed + # - cluster: only cluster-scoped resources are processed + # - namespace: only namespace-scoped resources are processed + resourceScope: all + # A `key: value` mapping of environment variables to add to the pod env: {} diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/Chart.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/Chart.yaml similarity index 64% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/Chart.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/Chart.yaml index d3cd8fb95..0ec317ae2 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/gateway/Chart.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +appVersion: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d description: Helm chart for deploying Istio gateways icon: https://istio.io/latest/favicons/android-192x192.png keywords: @@ -9,4 +9,4 @@ name: gateway sources: - https://github.com/istio/istio type: application -version: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +version: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/README.md b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/README.md similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/README.md rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/README.md diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-ambient.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-ambient.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-ambient.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-ambient.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-compatibility-version-1.25.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-compatibility-version-1.25.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-compatibility-version-1.25.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-compatibility-version-1.25.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-compatibility-version-1.26.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-compatibility-version-1.26.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-compatibility-version-1.26.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-compatibility-version-1.26.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-compatibility-version-1.27.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-compatibility-version-1.27.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-compatibility-version-1.27.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-compatibility-version-1.27.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-demo.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-demo.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-demo.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-demo.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-gke.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-gke.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-gke.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-gke.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-k3d.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-k3d.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-k3d.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-k3d.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-k3s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-k3s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-k3s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-k3s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-microk8s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-microk8s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-microk8s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-microk8s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-minikube.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-minikube.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-minikube.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-minikube.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-openshift.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-openshift.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-platform-openshift.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-platform-openshift.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-preview.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-preview.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-preview.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-preview.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-remote.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-remote.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-remote.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-remote.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-stable.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-stable.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/files/profile-stable.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/files/profile-stable.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/NOTES.txt b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/NOTES.txt similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/NOTES.txt rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/NOTES.txt diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/_helpers.tpl b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/_helpers.tpl similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/_helpers.tpl rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/_helpers.tpl diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/deployment.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/deployment.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/deployment.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/deployment.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/hpa.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/hpa.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/hpa.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/hpa.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/networkpolicy.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/networkpolicy.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/networkpolicy.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/networkpolicy.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/poddisruptionbudget.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/poddisruptionbudget.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/poddisruptionbudget.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/poddisruptionbudget.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/role.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/role.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/role.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/role.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/service.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/service.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/service.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/service.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/serviceaccount.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/serviceaccount.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/serviceaccount.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/serviceaccount.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/templates/zzz_profile.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/zzz_profile.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/templates/zzz_profile.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/templates/zzz_profile.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/values.schema.json b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/values.schema.json similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/values.schema.json rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/values.schema.json diff --git a/resources/v1.28-alpha.423eb7cf/charts/gateway/values.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/gateway/values.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/gateway/values.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/gateway/values.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/Chart.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/Chart.yaml similarity index 63% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/Chart.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/Chart.yaml index 1018673ed..094041d2c 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/Chart.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +appVersion: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d description: Helm chart for istio control plane icon: https://istio.io/latest/favicons/android-192x192.png keywords: @@ -9,4 +9,4 @@ keywords: name: istiod sources: - https://github.com/istio/istio -version: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +version: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/README.md b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/README.md similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/README.md rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/README.md diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/gateway-injection-template.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/gateway-injection-template.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/gateway-injection-template.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/gateway-injection-template.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/grpc-agent.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/grpc-agent.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/grpc-agent.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/grpc-agent.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/grpc-simple.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/grpc-simple.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/grpc-simple.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/grpc-simple.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/injection-template.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/injection-template.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/injection-template.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/injection-template.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/kube-gateway.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/kube-gateway.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/kube-gateway.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/kube-gateway.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-ambient.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-ambient.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-ambient.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-ambient.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-compatibility-version-1.25.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-compatibility-version-1.25.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-compatibility-version-1.25.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-compatibility-version-1.25.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-compatibility-version-1.26.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-compatibility-version-1.26.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-compatibility-version-1.26.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-compatibility-version-1.26.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-compatibility-version-1.27.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-compatibility-version-1.27.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-compatibility-version-1.27.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-compatibility-version-1.27.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-demo.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-demo.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-demo.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-demo.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-gke.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-gke.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-gke.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-gke.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-k3d.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-k3d.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-k3d.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-k3d.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-k3s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-k3s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-k3s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-k3s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-microk8s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-microk8s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-microk8s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-microk8s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-minikube.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-minikube.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-minikube.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-minikube.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-openshift.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-openshift.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-platform-openshift.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-platform-openshift.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-preview.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-preview.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-preview.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-preview.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-remote.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-remote.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-remote.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-remote.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-stable.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-stable.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/profile-stable.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/profile-stable.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/files/waypoint.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/waypoint.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/files/waypoint.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/files/waypoint.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/NOTES.txt b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/NOTES.txt similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/NOTES.txt rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/NOTES.txt diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/_helpers.tpl b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/_helpers.tpl similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/_helpers.tpl rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/_helpers.tpl diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/autoscale.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/autoscale.yaml similarity index 93% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/autoscale.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/autoscale.yaml index 9b952ba85..9ab43b5bf 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/autoscale.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/autoscale.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Not created if istiod is running remotely {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled .Values.istiodRemote.enabledLocalInjectorIstiod) }} {{- if and .Values.autoscaleEnabled .Values.autoscaleMin .Values.autoscaleMax }} @@ -41,3 +42,4 @@ spec: --- {{- end }} {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/clusterrole.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/clusterrole.yaml similarity index 98% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/clusterrole.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/clusterrole.yaml index 40f39511a..3280c96b5 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/clusterrole.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/clusterrole.yaml @@ -1,3 +1,5 @@ +# Created if cluster resources are not omitted +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} # Created if this is not a remote istiod, OR if it is and is also a config cluster {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled (or .Values.global.configCluster .Values.istiodRemote.enabledLocalInjectorIstiod)) }} {{ $mcsAPIGroup := or .Values.env.MCS_API_GROUP "multicluster.x-k8s.io" }} @@ -211,3 +213,4 @@ rules: resources: [ "serviceaccounts"] {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/clusterrolebinding.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/clusterrolebinding.yaml similarity index 92% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/clusterrolebinding.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/clusterrolebinding.yaml index 1b8fa4d07..0ca21b957 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/clusterrolebinding.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/clusterrolebinding.yaml @@ -1,3 +1,5 @@ +# Created if cluster resources are not omitted +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} # Created if this is not a remote istiod, OR if it is and is also a config cluster {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled (or .Values.global.configCluster .Values.istiodRemote.enabledLocalInjectorIstiod)) }} apiVersion: rbac.authorization.k8s.io/v1 @@ -38,3 +40,4 @@ subjects: namespace: {{ .Values.global.istioNamespace }} {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/configmap-jwks.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/configmap-jwks.yaml similarity index 86% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/configmap-jwks.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/configmap-jwks.yaml index 9d931c406..45943d383 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/configmap-jwks.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/configmap-jwks.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Not created if istiod is running remotely {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled .Values.istiodRemote.enabledLocalInjectorIstiod) }} {{- if .Values.jwksResolverExtraRootCA }} @@ -16,3 +17,4 @@ data: extra.pem: {{ .Values.jwksResolverExtraRootCA | quote }} {{- end }} {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/configmap-values.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/configmap-values.yaml similarity index 87% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/configmap-values.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/configmap-values.yaml index 75e6e0bcc..dcd1e3530 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/configmap-values.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/configmap-values.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} apiVersion: v1 kind: ConfigMap metadata: @@ -17,3 +18,4 @@ data: {{- $_ := unset $.Values "_original" }} merged-values: |- {{ .Values | toPrettyJson | indent 4 }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/configmap.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/configmap.yaml similarity index 97% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/configmap.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/configmap.yaml index a8446a6fc..a24ff9ee2 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/configmap.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/configmap.yaml @@ -78,6 +78,7 @@ {{- $originalMesh := include "mesh" . | fromYaml }} {{- $mesh := mergeOverwrite $originalMesh .Values.meshConfig }} +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} {{- if .Values.configMap }} apiVersion: v1 kind: ConfigMap @@ -109,3 +110,4 @@ data: {{- end }} --- {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/deployment.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/deployment.yaml similarity index 98% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/deployment.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/deployment.yaml index 1b769c6ec..15107e745 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/deployment.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/deployment.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Not created if istiod is running remotely {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled .Values.istiodRemote.enabledLocalInjectorIstiod) }} apiVersion: apps/v1 @@ -310,3 +311,4 @@ spec: --- {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/gateway-class-configmap.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/gateway-class-configmap.yaml similarity index 85% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/gateway-class-configmap.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/gateway-class-configmap.yaml index 6b23d716a..9f7cdb01d 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/gateway-class-configmap.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/gateway-class-configmap.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} {{ range $key, $value := .Values.gatewayClasses }} apiVersion: v1 kind: ConfigMap @@ -18,3 +19,4 @@ data: {{ end }} --- {{ end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/istiod-injector-configmap.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/istiod-injector-configmap.yaml similarity index 97% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/istiod-injector-configmap.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/istiod-injector-configmap.yaml index 171aff886..a5a6cf9ae 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/istiod-injector-configmap.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/istiod-injector-configmap.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} {{- if not .Values.global.omitSidecarInjectorConfigMap }} apiVersion: v1 kind: ConfigMap @@ -79,3 +80,4 @@ data: {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/mutatingwebhook.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/mutatingwebhook.yaml similarity index 98% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/mutatingwebhook.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/mutatingwebhook.yaml index ca017194e..26a6c8f00 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/mutatingwebhook.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/mutatingwebhook.yaml @@ -35,6 +35,8 @@ a unique prefix to each. */}} reinvocationPolicy: "{{ .reinvocationPolicy }}" admissionReviewVersions: ["v1"] {{- end }} + +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} {{- /* Installed for each revision - not installed for cluster resources ( cluster roles, bindings, crds) */}} {{- if not .Values.global.operatorManageWebhooks }} apiVersion: admissionregistration.k8s.io/v1 @@ -162,3 +164,4 @@ webhooks: {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/networkpolicy.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/networkpolicy.yaml similarity index 91% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/networkpolicy.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/networkpolicy.yaml index bcc1594d9..e844d5e5d 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/networkpolicy.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/networkpolicy.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} {{- if (.Values.global.networkPolicy).enabled }} apiVersion: networking.k8s.io/v1 kind: NetworkPolicy @@ -43,3 +44,4 @@ spec: egress: - {} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/poddisruptionbudget.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/poddisruptionbudget.yaml similarity index 93% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/poddisruptionbudget.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/poddisruptionbudget.yaml index fcd6c7c2e..0ac37d1cd 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/poddisruptionbudget.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/poddisruptionbudget.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Not created if istiod is running remotely {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled .Values.istiodRemote.enabledLocalInjectorIstiod) }} {{- if .Values.global.defaultPodDisruptionBudget.enabled }} @@ -37,3 +38,4 @@ spec: {{- end }} {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/reader-clusterrole.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/reader-clusterrole.yaml similarity index 93% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/reader-clusterrole.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/reader-clusterrole.yaml index dbaa80503..e0b0ff42a 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/reader-clusterrole.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/reader-clusterrole.yaml @@ -1,3 +1,5 @@ +# Created if cluster resources are not omitted +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} {{ $mcsAPIGroup := or .Values.env.MCS_API_GROUP "multicluster.x-k8s.io" }} apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole @@ -60,3 +62,4 @@ rules: resources: ["validatingwebhookconfigurations"] verbs: ["get", "list", "watch", "update"] {{- end}} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/reader-clusterrolebinding.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/reader-clusterrolebinding.yaml similarity index 81% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/reader-clusterrolebinding.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/reader-clusterrolebinding.yaml index aea9f01f7..624f00dce 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/reader-clusterrolebinding.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/reader-clusterrolebinding.yaml @@ -1,3 +1,5 @@ +# Created if cluster resources are not omitted +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: @@ -15,3 +17,4 @@ subjects: - kind: ServiceAccount name: istio-reader-service-account namespace: {{ .Values.global.istioNamespace }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/remote-istiod-endpointslices.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/remote-istiod-endpointslices.yaml similarity index 93% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/remote-istiod-endpointslices.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/remote-istiod-endpointslices.yaml index c173124cd..e2f4ff03b 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/remote-istiod-endpointslices.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/remote-istiod-endpointslices.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} {{- if and .Values.global.remotePilotAddress .Values.istiodRemote.enabled }} # if the remotePilotAddress is an IP addr {{- if regexMatch "^([0-9]*\\.){3}[0-9]*$" .Values.global.remotePilotAddress }} @@ -38,3 +39,4 @@ ports: --- {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/remote-istiod-service.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/remote-istiod-service.yaml similarity index 92% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/remote-istiod-service.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/remote-istiod-service.yaml index 0a48b9918..ab14497ba 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/remote-istiod-service.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/remote-istiod-service.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # This file is only used for remote {{- if and .Values.global.remotePilotAddress .Values.istiodRemote.enabled }} apiVersion: v1 @@ -39,3 +40,4 @@ spec: {{- end }} --- {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/templates/revision-tags-mwc.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/revision-tags-mwc.yaml similarity index 97% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/templates/revision-tags-mwc.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/revision-tags-mwc.yaml index d86f5aea8..556bb2f1e 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/templates/revision-tags-mwc.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/revision-tags-mwc.yaml @@ -33,6 +33,8 @@ a unique prefix to each. */}} reinvocationPolicy: "{{ .reinvocationPolicy }}" admissionReviewVersions: ["v1"] {{- end }} + +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} {{- if not .Values.global.operatorManageWebhooks }} {{- range $tagName := $.Values.revisionTags }} apiVersion: admissionregistration.k8s.io/v1 @@ -149,3 +151,4 @@ webhooks: --- {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/templates/revision-tags-svc.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/revision-tags-svc.yaml similarity index 93% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/templates/revision-tags-svc.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/revision-tags-svc.yaml index d2e9a3e67..5c4826d23 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/templates/revision-tags-svc.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/revision-tags-svc.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Adapted from istio-discovery/templates/service.yaml {{- range $tagName := .Values.revisionTags }} apiVersion: v1 @@ -53,3 +54,4 @@ spec: {{- end }} --- {{- end -}} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/role.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/role.yaml similarity index 92% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/role.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/role.yaml index bbcfbe435..8abe608b6 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/role.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/role.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Created if this is not a remote istiod, OR if it is and is also a config cluster {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled (or .Values.global.configCluster .Values.istiodRemote.enabledLocalInjectorIstiod)) }} apiVersion: rbac.authorization.k8s.io/v1 @@ -33,3 +34,4 @@ rules: resources: ["leases"] verbs: ["get", "update", "patch", "create"] {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/rolebinding.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/rolebinding.yaml similarity index 89% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/rolebinding.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/rolebinding.yaml index 0c66b38a7..731964f04 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/rolebinding.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/rolebinding.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Created if this is not a remote istiod, OR if it is and is also a config cluster {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled (or .Values.global.configCluster .Values.istiodRemote.enabledLocalInjectorIstiod)) }} apiVersion: rbac.authorization.k8s.io/v1 @@ -19,3 +20,4 @@ subjects: name: istiod{{- if not (eq .Values.revision "") }}-{{ .Values.revision }}{{- end }} namespace: {{ .Values.global.istioNamespace }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/service.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/service.yaml similarity index 94% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/service.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/service.yaml index 25bda4dfd..c3aade8a4 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/service.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/service.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Not created if istiod is running remotely {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled .Values.istiodRemote.enabledLocalInjectorIstiod) }} apiVersion: v1 @@ -55,3 +56,4 @@ spec: {{- end }} --- {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/serviceaccount.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/serviceaccount.yaml similarity index 88% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/serviceaccount.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/serviceaccount.yaml index 8b4a0c0fa..ee40eedf8 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/serviceaccount.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/serviceaccount.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Created if this is not a remote istiod, OR if it is and is also a config cluster {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled (or .Values.global.configCluster .Values.istiodRemote.enabledLocalInjectorIstiod)) }} apiVersion: v1 @@ -22,3 +23,4 @@ metadata: {{- end }} {{- end }} --- +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/validatingadmissionpolicy.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/validatingadmissionpolicy.yaml similarity index 95% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/validatingadmissionpolicy.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/validatingadmissionpolicy.yaml index 8562a52d5..838d9fbaf 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/validatingadmissionpolicy.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/validatingadmissionpolicy.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Created if this is not a remote istiod, OR if it is and is also a config cluster {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled (or .Values.global.configCluster .Values.istiodRemote.enabledLocalInjectorIstiod)) }} {{- if .Values.experimental.stableValidationPolicy }} @@ -61,3 +62,4 @@ spec: validationActions: [Deny] {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/validatingwebhookconfiguration.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/validatingwebhookconfiguration.yaml similarity index 95% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/validatingwebhookconfiguration.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/validatingwebhookconfiguration.yaml index b49bf7faf..6903b29b5 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/validatingwebhookconfiguration.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/validatingwebhookconfiguration.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} # Created if this is not a remote istiod, OR if it is and is also a config cluster {{- if or (not .Values.istiodRemote.enabled) (and .Values.istiodRemote.enabled (or .Values.global.configCluster .Values.istiodRemote.enabledLocalInjectorIstiod)) }} {{- if .Values.global.configValidation }} @@ -66,3 +67,4 @@ webhooks: --- {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/zzy_descope_legacy.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/zzy_descope_legacy.yaml similarity index 99% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/zzy_descope_legacy.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/zzy_descope_legacy.yaml index ae8fced29..73202418c 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/zzy_descope_legacy.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/zzy_descope_legacy.yaml @@ -1,3 +1,3 @@ {{/* Copy anything under `.pilot` to `.`, to avoid the need to specify a redundant prefix. Due to the file naming, this always happens after zzz_profile.yaml */}} -{{- $_ := mustMergeOverwrite $.Values (index $.Values "pilot") }} \ No newline at end of file +{{- $_ := mustMergeOverwrite $.Values (index $.Values "pilot") }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/zzz_profile.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/zzz_profile.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/zzz_profile.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/templates/zzz_profile.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/values.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/values.yaml similarity index 97% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/values.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/istiod/values.yaml index 743e48604..81f141aae 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/values.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/istiod/values.yaml @@ -254,7 +254,7 @@ _internal_defaults_do_not_set: # Dev builds from prow are on gcr.io hub: gcr.io/istio-testing # Default tag for Istio images. - tag: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 + tag: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d # Variant of the image to use. # Currently supported are: [debug, distroless] variant: "" @@ -293,6 +293,14 @@ _internal_defaults_do_not_set: omitSidecarInjectorConfigMap: false + # resourceScope controls what resources will be processed by helm. + # This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + # It can be one of: + # - all: all resources are processed + # - cluster: only cluster-scoped resources are processed + # - namespace: only namespace-scoped resources are processed + resourceScope: all + # Configure whether Operator manages webhook configurations. The current behavior # of Istiod is to manage its own webhook configurations. # When this option is set as true, Istio Operator, instead of webhooks, manages the diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/Chart.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/Chart.yaml similarity index 71% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/Chart.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/Chart.yaml index 2b0e3f5fe..de2e294b6 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/Chart.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +appVersion: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d description: Helm chart for istio revision tags name: revisiontags sources: diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-ambient.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-ambient.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-ambient.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-ambient.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-compatibility-version-1.25.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-compatibility-version-1.25.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-compatibility-version-1.25.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-compatibility-version-1.25.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-compatibility-version-1.26.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-compatibility-version-1.26.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-compatibility-version-1.26.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-compatibility-version-1.26.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-compatibility-version-1.27.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-compatibility-version-1.27.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-compatibility-version-1.27.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-compatibility-version-1.27.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-demo.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-demo.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-demo.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-demo.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-gke.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-gke.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-gke.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-gke.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-k3d.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-k3d.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-k3d.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-k3d.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-k3s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-k3s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-k3s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-k3s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-microk8s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-microk8s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-microk8s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-microk8s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-minikube.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-minikube.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-minikube.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-minikube.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-openshift.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-openshift.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-platform-openshift.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-platform-openshift.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-preview.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-preview.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-preview.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-preview.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-remote.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-remote.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-remote.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-remote.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-stable.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-stable.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/files/profile-stable.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/files/profile-stable.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/revision-tags-mwc.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/templates/revision-tags-mwc.yaml similarity index 97% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/revision-tags-mwc.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/templates/revision-tags-mwc.yaml index d86f5aea8..556bb2f1e 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/revision-tags-mwc.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/templates/revision-tags-mwc.yaml @@ -33,6 +33,8 @@ a unique prefix to each. */}} reinvocationPolicy: "{{ .reinvocationPolicy }}" admissionReviewVersions: ["v1"] {{- end }} + +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "cluster") }} {{- if not .Values.global.operatorManageWebhooks }} {{- range $tagName := $.Values.revisionTags }} apiVersion: admissionregistration.k8s.io/v1 @@ -149,3 +151,4 @@ webhooks: --- {{- end }} {{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/revision-tags-svc.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/templates/revision-tags-svc.yaml similarity index 93% rename from resources/v1.28-alpha.423eb7cf/charts/istiod/templates/revision-tags-svc.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/templates/revision-tags-svc.yaml index d2e9a3e67..5c4826d23 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/istiod/templates/revision-tags-svc.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/templates/revision-tags-svc.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.global.resourceScope "all") (eq .Values.global.resourceScope "namespace") }} # Adapted from istio-discovery/templates/service.yaml {{- range $tagName := .Values.revisionTags }} apiVersion: v1 @@ -53,3 +54,4 @@ spec: {{- end }} --- {{- end -}} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/templates/zzz_profile.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/templates/zzz_profile.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/templates/zzz_profile.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/templates/zzz_profile.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/values.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/values.yaml similarity index 97% rename from resources/v1.28-alpha.423eb7cf/charts/revisiontags/values.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/values.yaml index 743e48604..81f141aae 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/revisiontags/values.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/revisiontags/values.yaml @@ -254,7 +254,7 @@ _internal_defaults_do_not_set: # Dev builds from prow are on gcr.io hub: gcr.io/istio-testing # Default tag for Istio images. - tag: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 + tag: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d # Variant of the image to use. # Currently supported are: [debug, distroless] variant: "" @@ -293,6 +293,14 @@ _internal_defaults_do_not_set: omitSidecarInjectorConfigMap: false + # resourceScope controls what resources will be processed by helm. + # This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + # It can be one of: + # - all: all resources are processed + # - cluster: only cluster-scoped resources are processed + # - namespace: only namespace-scoped resources are processed + resourceScope: all + # Configure whether Operator manages webhook configurations. The current behavior # of Istiod is to manage its own webhook configurations. # When this option is set as true, Istio Operator, instead of webhooks, manages the diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/Chart.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/Chart.yaml similarity index 63% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/Chart.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/Chart.yaml index 33399cfe0..45b2cabf5 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/Chart.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/Chart.yaml @@ -1,5 +1,5 @@ apiVersion: v2 -appVersion: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +appVersion: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d description: Helm chart for istio ztunnel components icon: https://istio.io/latest/favicons/android-192x192.png keywords: @@ -8,4 +8,4 @@ keywords: name: ztunnel sources: - https://github.com/istio/istio -version: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 +version: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/README.md b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/README.md similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/README.md rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/README.md diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-ambient.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-ambient.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-ambient.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-ambient.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-compatibility-version-1.25.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-compatibility-version-1.25.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-compatibility-version-1.25.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-compatibility-version-1.25.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-compatibility-version-1.26.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-compatibility-version-1.26.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-compatibility-version-1.26.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-compatibility-version-1.26.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-compatibility-version-1.27.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-compatibility-version-1.27.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-compatibility-version-1.27.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-compatibility-version-1.27.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-demo.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-demo.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-demo.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-demo.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-gke.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-gke.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-gke.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-gke.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-k3d.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-k3d.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-k3d.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-k3d.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-k3s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-k3s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-k3s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-k3s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-microk8s.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-microk8s.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-microk8s.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-microk8s.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-minikube.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-minikube.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-minikube.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-minikube.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-openshift.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-openshift.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-platform-openshift.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-platform-openshift.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-preview.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-preview.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-preview.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-preview.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-remote.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-remote.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-remote.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-remote.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-stable.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-stable.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/files/profile-stable.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/files/profile-stable.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/NOTES.txt b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/NOTES.txt similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/NOTES.txt rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/NOTES.txt diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/_helpers.tpl b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/_helpers.tpl similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/_helpers.tpl rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/_helpers.tpl diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/daemonset.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/daemonset.yaml similarity index 98% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/daemonset.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/daemonset.yaml index 7de85a2d1..b10e99cfa 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/daemonset.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/daemonset.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.resourceScope "all") (eq .Values.resourceScope "namespace") }} apiVersion: apps/v1 kind: DaemonSet metadata: @@ -208,3 +209,4 @@ spec: {{- with .Values.volumes }} {{- toYaml . | nindent 6}} {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/rbac.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/rbac.yaml similarity index 69% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/rbac.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/rbac.yaml index 0a8138c9a..18291716b 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/rbac.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/rbac.yaml @@ -1,26 +1,4 @@ -apiVersion: v1 -kind: ServiceAccount - {{- with .Values.imagePullSecrets }} -imagePullSecrets: - {{- range . }} - - name: {{ . }} - {{- end }} - {{- end }} -metadata: - name: {{ include "ztunnel.release-name" . }} - namespace: {{ .Release.Namespace }} - labels: - app.kubernetes.io/name: ztunnel - {{- include "istio.labels" . | nindent 4}} - {{ with .Values.labels -}}{{ toYaml . | nindent 4}}{{ end }} - annotations: -{{- if .Values.revision }} - {{- $annos := set $.Values.annotations "istio.io/rev" .Values.revision }} - {{- toYaml $annos | nindent 4}} -{{- else }} - {{- .Values.annotations | toYaml | nindent 4 }} -{{- end }} ---- +{{- if or (eq .Values.resourceScope "all") (eq .Values.resourceScope "cluster") }} {{- if (eq (.Values.platform | default "") "openshift") }} apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole @@ -70,3 +48,4 @@ subjects: namespace: {{ .Release.Namespace }} {{- end }} --- +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/resourcequota.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/resourcequota.yaml similarity index 84% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/resourcequota.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/resourcequota.yaml index a1c0e5496..d33c9fe13 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/resourcequota.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/resourcequota.yaml @@ -1,3 +1,4 @@ +{{- if or (eq .Values.resourceScope "all") (eq .Values.resourceScope "namespace") }} {{- if .Values.resourceQuotas.enabled }} apiVersion: v1 kind: ResourceQuota @@ -18,3 +19,4 @@ spec: values: - system-node-critical {{- end }} +{{- end }} diff --git a/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/serviceaccount.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/serviceaccount.yaml new file mode 100644 index 000000000..e1146f392 --- /dev/null +++ b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/serviceaccount.yaml @@ -0,0 +1,24 @@ +{{- if or (eq .Values.resourceScope "all") (eq .Values.resourceScope "namespace") }} +apiVersion: v1 +kind: ServiceAccount + {{- with .Values.imagePullSecrets }} +imagePullSecrets: + {{- range . }} + - name: {{ . }} + {{- end }} + {{- end }} +metadata: + name: {{ include "ztunnel.release-name" . }} + namespace: {{ .Release.Namespace }} + labels: + app.kubernetes.io/name: ztunnel + {{- include "istio.labels" . | nindent 4}} + {{ with .Values.labels -}}{{ toYaml . | nindent 4}}{{ end }} + annotations: +{{- if .Values.revision }} + {{- $annos := set $.Values.annotations "istio.io/rev" .Values.revision }} + {{- toYaml $annos | nindent 4}} +{{- else }} + {{- .Values.annotations | toYaml | nindent 4 }} +{{- end }} +{{- end }} \ No newline at end of file diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/zzz_profile.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/zzz_profile.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/templates/zzz_profile.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/templates/zzz_profile.yaml diff --git a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/values.yaml b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/values.yaml similarity index 90% rename from resources/v1.28-alpha.423eb7cf/charts/ztunnel/values.yaml rename to resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/values.yaml index da4bc9358..c5e0abcbd 100644 --- a/resources/v1.28-alpha.423eb7cf/charts/ztunnel/values.yaml +++ b/resources/v1.28-alpha.4b0fdcfb/charts/ztunnel/values.yaml @@ -4,7 +4,7 @@ _internal_defaults_do_not_set: # Hub to pull from. Image will be `Hub/Image:Tag-Variant` hub: gcr.io/istio-testing # Tag to pull from. Image will be `Hub/Image:Tag-Variant` - tag: 1.28-alpha.423eb7cf34db72973dbacdf4ed9d5d4e716d1f63 + tag: 1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d # Variant to pull. Options are "debug" or "distroless". Unset will use the default for the given version. variant: "" @@ -118,6 +118,14 @@ _internal_defaults_do_not_set: # TODO Ambient inpod - for OpenShift, set to the following to get writable sockets in hostmounts to work, eventually consider CSI driver instead #seLinuxOptions: # type: spc_t + + # resourceScope controls what resources will be processed by helm. + # This is useful when installing Istio on a cluster where some resources need to be owned by a cluster administrator and some can be owned by the mesh administrator. + # It can be one of: + # - all: all resources are processed + # - cluster: only cluster-scoped resources are processed + # - namespace: only namespace-scoped resources are processed + resourceScope: all # K8s DaemonSet update strategy. # https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/daemon-set-v1/#DaemonSetSpec). diff --git a/resources/v1.28-alpha.4b0fdcfb/cni-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag b/resources/v1.28-alpha.4b0fdcfb/cni-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag new file mode 100644 index 000000000..72ac938bc --- /dev/null +++ b/resources/v1.28-alpha.4b0fdcfb/cni-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag @@ -0,0 +1 @@ +5cad3abfb055cf0e7832571f622ecf26 diff --git a/resources/v1.28-alpha.4b0fdcfb/commit b/resources/v1.28-alpha.4b0fdcfb/commit new file mode 100644 index 000000000..56d88a1cc --- /dev/null +++ b/resources/v1.28-alpha.4b0fdcfb/commit @@ -0,0 +1 @@ +4b0fdcfb9ab3a6241d254309036c8714501e669d diff --git a/resources/v1.28-alpha.4b0fdcfb/gateway-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag b/resources/v1.28-alpha.4b0fdcfb/gateway-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag new file mode 100644 index 000000000..8c5e59bd8 --- /dev/null +++ b/resources/v1.28-alpha.4b0fdcfb/gateway-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag @@ -0,0 +1 @@ +7ece8a640f6a6e302e0e1db23606b361 diff --git a/resources/v1.28-alpha.4b0fdcfb/istiod-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag b/resources/v1.28-alpha.4b0fdcfb/istiod-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag new file mode 100644 index 000000000..4833d7286 --- /dev/null +++ b/resources/v1.28-alpha.4b0fdcfb/istiod-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag @@ -0,0 +1 @@ +01e3684ed589316e236e2f88249501ba diff --git a/resources/v1.28-alpha.423eb7cf/profiles/ambient.yaml b/resources/v1.28-alpha.4b0fdcfb/profiles/ambient.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/profiles/ambient.yaml rename to resources/v1.28-alpha.4b0fdcfb/profiles/ambient.yaml diff --git a/resources/v1.28-alpha.423eb7cf/profiles/default.yaml b/resources/v1.28-alpha.4b0fdcfb/profiles/default.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/profiles/default.yaml rename to resources/v1.28-alpha.4b0fdcfb/profiles/default.yaml diff --git a/resources/v1.28-alpha.423eb7cf/profiles/demo.yaml b/resources/v1.28-alpha.4b0fdcfb/profiles/demo.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/profiles/demo.yaml rename to resources/v1.28-alpha.4b0fdcfb/profiles/demo.yaml diff --git a/resources/v1.28-alpha.423eb7cf/profiles/empty.yaml b/resources/v1.28-alpha.4b0fdcfb/profiles/empty.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/profiles/empty.yaml rename to resources/v1.28-alpha.4b0fdcfb/profiles/empty.yaml diff --git a/resources/v1.28-alpha.423eb7cf/profiles/openshift-ambient.yaml b/resources/v1.28-alpha.4b0fdcfb/profiles/openshift-ambient.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/profiles/openshift-ambient.yaml rename to resources/v1.28-alpha.4b0fdcfb/profiles/openshift-ambient.yaml diff --git a/resources/v1.28-alpha.423eb7cf/profiles/openshift.yaml b/resources/v1.28-alpha.4b0fdcfb/profiles/openshift.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/profiles/openshift.yaml rename to resources/v1.28-alpha.4b0fdcfb/profiles/openshift.yaml diff --git a/resources/v1.28-alpha.423eb7cf/profiles/preview.yaml b/resources/v1.28-alpha.4b0fdcfb/profiles/preview.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/profiles/preview.yaml rename to resources/v1.28-alpha.4b0fdcfb/profiles/preview.yaml diff --git a/resources/v1.28-alpha.423eb7cf/profiles/remote.yaml b/resources/v1.28-alpha.4b0fdcfb/profiles/remote.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/profiles/remote.yaml rename to resources/v1.28-alpha.4b0fdcfb/profiles/remote.yaml diff --git a/resources/v1.28-alpha.423eb7cf/profiles/stable.yaml b/resources/v1.28-alpha.4b0fdcfb/profiles/stable.yaml similarity index 100% rename from resources/v1.28-alpha.423eb7cf/profiles/stable.yaml rename to resources/v1.28-alpha.4b0fdcfb/profiles/stable.yaml diff --git a/resources/v1.28-alpha.4b0fdcfb/ztunnel-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag b/resources/v1.28-alpha.4b0fdcfb/ztunnel-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag new file mode 100644 index 000000000..65b405ba5 --- /dev/null +++ b/resources/v1.28-alpha.4b0fdcfb/ztunnel-1.28-alpha.4b0fdcfb9ab3a6241d254309036c8714501e669d.tgz.etag @@ -0,0 +1 @@ +cf5887bb1edb88305125554656e68a3c