Sync upstream 1.24.5#379
Merged
openshift-merge-bot[bot] merged 20 commits intoopenshift-service-mesh:release-1.24from May 13, 2025
Merged
Sync upstream 1.24.5#379openshift-merge-bot[bot] merged 20 commits intoopenshift-service-mesh:release-1.24from
openshift-merge-bot[bot] merged 20 commits intoopenshift-service-mesh:release-1.24from
Conversation
* Check for reachable ingress in TestGatewayAPI security test (#55028) When the Ingress is a domain name, like in public cloud, it might take a bit for the DNS name to become populated. Set a check to wait for the domain name to become resolvable. Signed-off-by: Maxim Babushkin <mbabushk@redhat.com> * Fix Telemetry Tracint flaky tests failures (#55325) When running the telemetry tests on public cloud platforms, DNS endpoint resolve could take some time. - Increase telemetry tracing tests timeout. - Use the function with the wait and retry approach to get the endpoint resolvable. Signed-off-by: Maxim Babushkin <mbabushk@redhat.com> --------- Signed-off-by: Maxim Babushkin <mbabushk@redhat.com>
During the TestCNIRaceRepair test execution, the test deletes the CNI configuration and restarts the deployment. In Kind environment, the container at some point gets a "Failure" status with validation exit error code of 126. The test checks for that error and continues. But in Openshift, the container gets stuck in init container status forever and not sets any exit error code. But in Openshift we are able to check the container stuck/failure reason by looking at the events of the container. In Openshift, the container will show the following message in the events - "err in GetCNIConfigFromFile". That could be our indication for the right error status and continue the test. Set check for both environments. Signed-off-by: Maxim Babushkin <mbabushk@redhat.com>
* disable default inbound retry for gRPC Signed-off-by: Rama Chavali <rama.rao@salesforce.com> * release notes Signed-off-by: Rama Chavali <rama.rao@salesforce.com> --------- Signed-off-by: Rama Chavali <rama.rao@salesforce.com> Co-authored-by: Rama Chavali <rama.rao@salesforce.com>
Currently, the CNI `REPAIR_ENABLED` flag is mistakenly enabled based on `.cni.chained` value instead of `.repair.enabled`. This PR fixes it. Signed-off-by: Sridhar Gaddam <sgaddam@redhat.com> Co-authored-by: Sridhar Gaddam <sgaddam@redhat.com>
We accounted for this in DependantConfigs() but not Key(). Can reproduce by adding/removing a Alias service from a Sidecar scope and you will see its not updated before this PR. With RDS cache off, or `cachez?clear=true`, or this PR, it is updated. Co-authored-by: John Howard <john.howard@solo.io>
When test resources cleaned up in Openshift, it takes time for the "istio-ingressgateway" and "istio-egressgateway" services to be deleted. As a result, when the resources are cleaned after one test and the next test starts, ittend to fail because the services are in deletion state and failed to be used by the next test. Check for the services to be deleted completely before ending the test. The PR is a cherry-pick of: - istio/istio#54447 - istio/istio#54377 (partially. only clean part) Signed-off-by: Maxim Babushkin <mbabushk@redhat.com>
Fixes istio/istio#55793 Also adds istioctl support for the ztunnel side fixes in istio/ztunnel#1510 Co-authored-by: John Howard <john.howard@solo.io>
…tio@release-1.24 (#55863)
sridhargaddam
approved these changes
May 12, 2025
Collaborator
Author
|
Tests are failing with: I need to use our proxy sha instead of upstream. |
Istio release 1.24.5
FilipB
force-pushed
the
sync-upstream-1.24.5
branch
from
aa05ae7 to
f750bd1
Compare
Collaborator
Author
|
/retest |
1 similar comment
Collaborator
Author
|
/retest |
Collaborator
Author
|
/test integ-telemetry |
Collaborator
Author
|
/retest |
dgn
approved these changes
May 13, 2025
openshift-merge-bot
bot
merged commit 6202783
into
openshift-service-mesh:release-1.24
8 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
6 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Sync with upstream 1.24.5 tag