istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

prepare release 1.27 work (#16729) 

* manual prepare of 1.27.0

Signed-off-by: Daniel Hawton <daniel.hawton@solo.io>

* temporarily disable helm canary upgrade doc test

Signed-off-by: Daniel Hawton <daniel.hawton@solo.io>

---------

Signed-off-by: Daniel Hawton <daniel.hawton@solo.io>
This commit is contained in:
Daniel Hawton 2025-08-01 14:38:05 +02:00 committed by GitHub
parent 8a8fab63ea
commit 4f7dc8aea9
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
27 changed files with 133 additions and 699 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Makefile.core.mk
View File

@ -87,7 +87,7 @@ export NETLIFY_URL
# Which branch of the Istio source code do we fetch stuff from
export SOURCE_BRANCH_NAME ?= master
export SOURCE_BRANCH_NAME ?= release-1.27
site:
@scripts/gen_site.sh

2
content/en/docs/examples/virtual-machines/snips.sh
View File

@ -39,7 +39,7 @@ sudo systemctl restart mysql
}
snip_running_mysql_on_the_vm_3() {
curl -LO https://raw.githubusercontent.com/istio/istio/master/samples/bookinfo/src/mysql/mysqldb-init.sql
curl -LO https://raw.githubusercontent.com/istio/istio/release-1.27/samples/bookinfo/src/mysql/mysqldb-init.sql
mysql -u root -ppassword < mysqldb-init.sql
}

12
content/en/docs/reference/commands/install-cni/index.html
View File

@ -613,12 +613,6 @@ https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#fip
<td><code>true</code></td>
<td>If enabled, Istio merge destinationrules considering their exportTo fields, they will be kept as independent rules if the exportTos are not equal.</td>
</tr>
<tr id='enable-gateway-api-inference-extension'>
<td><a href='#enable-gateway-api-inference-extension'><code>ENABLE_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='enable-gateway-api-manual-deployment'>
<td><a href='#enable-gateway-api-manual-deployment'><code>ENABLE_GATEWAY_API_MANUAL_DEPLOYMENT</code></a></td>
<td>Boolean</td>
@ -1565,6 +1559,12 @@ Only applies when traffic from all groups (i.e. &#34;*&#34;) is being redirected
<td><code>false</code></td>
<td>Whether to use insecure TLS in kubeconfig file</td>
</tr>
<tr id='support-gateway-api-inference-extension'>
<td><a href='#support-gateway-api-inference-extension'><code>SUPPORT_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='system-namespace'>
<td><a href='#system-namespace'><code>SYSTEM_NAMESPACE</code></a></td>
<td>String</td>

63
content/en/docs/reference/commands/istioctl/index.html
View File

@ -201,11 +201,6 @@ debug and diagnose their Istio mesh.
<td>Comma-separated list of output logging level for scopes in the format of &lt;scope&gt;:&lt;level&gt;[,&lt;scope&gt;:&lt;level&gt;,...]. Possible values for &lt;level&gt;: none, error, warn, info, debug (default ``)</td>
</tr>
<tr>
<td><code>--log-reset</code></td>
<td></td>
<td>Reset log levels to default value. (info) </td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
@ -218,7 +213,7 @@ debug and diagnose their Istio mesh.
<tr>
<td><code>--reset</code></td>
<td></td>
<td>Reset all levels to default value. (info) </td>
<td>Reset levels to default value. (info) </td>
</tr>
<tr>
<td><code>--revision &lt;string&gt;</code></td>
@ -236,11 +231,6 @@ debug and diagnose their Istio mesh.
<td>Comma-separated list of stack trace level for scopes in the format of &lt;scope&gt;:&lt;stack-trace-level&gt;[,&lt;scope&gt;:&lt;stack-trace-level&gt;,...]. Possible values for &lt;stack-trace-level&gt;: none, error, warn, info, debug (default ``)</td>
</tr>
<tr>
<td><code>--stack-trace-reset</code></td>
<td></td>
<td>Reset stack stace levels to default value. (none) </td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
@ -616,11 +606,6 @@ All names except label and annotation keys support &#39;*&#39; glob matching pat
<td>Set a specific directory for output archive file. (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--rq-concurrency &lt;int&gt;</code></td>
<td></td>
<td>Set the concurrency limit of requests to the Kubernetes API server, defaults to 32. (default `0`)</td>
@ -761,11 +746,6 @@ All names except label and annotation keys support &#39;*&#39; glob matching pat
<td>Set a specific directory for output archive file. (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--rq-concurrency &lt;int&gt;</code></td>
<td></td>
<td>Set the concurrency limit of requests to the Kubernetes API server, defaults to 32. (default `0`)</td>
@ -2457,11 +2437,6 @@ from multiple sources (mesh-level, namespace-level and workload-level).</p>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
@ -2807,11 +2782,6 @@ the configuration objects that affect that pod.</p>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
@ -2819,7 +2789,7 @@ the configuration objects that affect that pod.</p>
</tbody>
</table>
<h4 id="istioctl-experimental-describe-pod Examples">Examples</h4>
<pre class="language-bash"><code> # Pod query with inferred namespace (current context&#39;s namespace)
<pre class="language-bash"><code> #Pod query with inferred namespace (current context&#39;s namespace)
istioctl experimental describe pod helloworld-v1-676yyy3y5r-d8hdl
# Pod query with explicit namespace
@ -2891,11 +2861,6 @@ the configuration objects that affect that service.</p>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
@ -2903,7 +2868,7 @@ the configuration objects that affect that service.</p>
</tbody>
</table>
<h4 id="istioctl-experimental-describe-service Examples">Examples</h4>
<pre class="language-bash"><code> # Service query with inferred namespace (current context&#39;s namespace)
<pre class="language-bash"><code> #Service query with inferred namespace (current context&#39;s namespace)
istioctl experimental describe service productpage
# Service query with explicit namespace
@ -3550,11 +3515,6 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<td>Use plain-text HTTP/2 when connecting to server (no TLS). </td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--revision &lt;string&gt;</code></td>
<td><code>-r</code></td>
<td>Control plane revision (default ``)</td>
@ -6185,11 +6145,6 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<td>Use plain-text HTTP/2 when connecting to server (no TLS). </td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--revision &lt;string&gt;</code></td>
<td><code>-r</code></td>
<td>Control plane revision (default ``)</td>
@ -8539,12 +8494,6 @@ https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#fip
<td><code>true</code></td>
<td>If enabled, Istio merge destinationrules considering their exportTo fields, they will be kept as independent rules if the exportTos are not equal.</td>
</tr>
<tr id='enable-gateway-api-inference-extension'>
<td><a href='#enable-gateway-api-inference-extension'><code>ENABLE_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='enable-gateway-api-manual-deployment'>
<td><a href='#enable-gateway-api-manual-deployment'><code>ENABLE_GATEWAY_API_MANUAL_DEPLOYMENT</code></a></td>
<td>Boolean</td>
@ -9449,6 +9398,12 @@ Only applies when traffic from all groups (i.e. &#34;*&#34;) is being redirected
<td><code></code></td>
<td>Additional config map to load for shared MeshConfig settings. The standard mesh config will take precedence.</td>
</tr>
<tr id='support-gateway-api-inference-extension'>
<td><a href='#support-gateway-api-inference-extension'><code>SUPPORT_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='term'>
<td><a href='#term'><code>TERM</code></a></td>
<td>String</td>

12
content/en/docs/reference/commands/pilot-agent/index.html
View File

@ -876,12 +876,6 @@ https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#fip
<td><code>true</code></td>
<td>If enabled, Istio merge destinationrules considering their exportTo fields, they will be kept as independent rules if the exportTos are not equal.</td>
</tr>
<tr id='enable-gateway-api-inference-extension'>
<td><a href='#enable-gateway-api-inference-extension'><code>ENABLE_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='enable-gateway-api-manual-deployment'>
<td><a href='#enable-gateway-api-manual-deployment'><code>ENABLE_GATEWAY_API_MANUAL_DEPLOYMENT</code></a></td>
<td>Boolean</td>
@ -1918,6 +1912,12 @@ Only applies when traffic from all groups (i.e. &#34;*&#34;) is being redirected
<td><code></code></td>
<td>Additional config map to load for shared MeshConfig settings. The standard mesh config will take precedence.</td>
</tr>
<tr id='support-gateway-api-inference-extension'>
<td><a href='#support-gateway-api-inference-extension'><code>SUPPORT_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='token-audiences'>
<td><a href='#token-audiences'><code>TOKEN_AUDIENCES</code></a></td>
<td>String</td>

18
content/en/docs/reference/commands/pilot-discovery/index.html
View File

@ -268,17 +268,17 @@ If it is not installed already, you can install it via your OS&#39;s package man
<tr>
<td><code>--log_caller &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, tag-watcher, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] (default ``)</td>
<td>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] (default ``)</td>
</tr>
<tr>
<td><code>--log_output_level &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated minimum per-scope logging level of messages to output, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope&gt;:&lt;level&gt;,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, tag-watcher, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default ``)</td>
<td>Comma-separated minimum per-scope logging level of messages to output, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope&gt;:&lt;level&gt;,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default ``)</td>
</tr>
<tr>
<td><code>--log_stacktrace_level &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope:level&gt;,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, tag-watcher, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td>
<td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope:level&gt;,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td>
</tr>
<tr>
<td><code>--log_target &lt;stringArray&gt;</code></td>
@ -539,12 +539,6 @@ https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#fip
<td><code>true</code></td>
<td>If enabled, Istio merge destinationrules considering their exportTo fields, they will be kept as independent rules if the exportTos are not equal.</td>
</tr>
<tr id='enable-gateway-api-inference-extension'>
<td><a href='#enable-gateway-api-inference-extension'><code>ENABLE_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='enable-gateway-api-manual-deployment'>
<td><a href='#enable-gateway-api-manual-deployment'><code>ENABLE_GATEWAY_API_MANUAL_DEPLOYMENT</code></a></td>
<td>Boolean</td>
@ -1461,6 +1455,12 @@ Only applies when traffic from all groups (i.e. &#34;*&#34;) is being redirected
<td><code></code></td>
<td>Additional config map to load for shared MeshConfig settings. The standard mesh config will take precedence.</td>
</tr>
<tr id='support-gateway-api-inference-extension'>
<td><a href='#support-gateway-api-inference-extension'><code>SUPPORT_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='token-audiences'>
<td><a href='#token-audiences'><code>TOKEN_AUDIENCES</code></a></td>
<td>String</td>

23
content/en/docs/reference/config/annotations/index.html
View File

@ -11,29 +11,6 @@ weight: 60
This page presents the various resource <a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/">annotations</a> that
Istio supports to control its behavior.
</p>
<h2 id="AmbientBypassInboundCapture">ambient.istio.io/bypass-inbound-capture</h2>
<table class="annotations">
<tbody>
<tr>
<th>Name</th>
<td><code>ambient.istio.io/bypass-inbound-capture</code></td>
</tr>
<tr>
<th>Feature Status</th>
<td>Alpha</td>
</tr>
<tr>
<th>Resource Types</th>
<td>[Pod]</td>
</tr>
<tr>
<th>Description</th>
<td><p>When specified on a <code>Pod</code> enrolled in ambient mesh, only outbound traffic will be captured.
This is intended to be used when enrolling a workload that only receives traffic from out-of-the-mesh clients, such as third party ingress controllers.</p>
</td>
</tr>
</tbody>
</table>
<h2 id="AmbientRedirection">ambient.istio.io/redirection</h2>
<table class="annotations">
<tbody>

65
content/en/docs/reference/config/istio.mesh.v1alpha1/index.html
View File

@ -7,7 +7,7 @@ location: https://istio.io/docs/reference/config/istio.mesh.v1alpha1.html
layout: protoc-gen-docs
generator: protoc-gen-docs
weight: 20
number_of_entries: 83
number_of_entries: 81
---
<p>Configuration affecting the service mesh as a whole.</p>
@ -4097,29 +4097,6 @@ to be lowercase per the protocol specification. Envoy will ignore this field for
requests and automatically normalize headers to lowercase, ensuring compliance with HTTP/2
standards.</p>
</td>
</tr>
<tr id="ProxyConfig-ProxyHeaders-x_forwarded_host">
<td><div class="field"><div class="name"><code><a href="#ProxyConfig-ProxyHeaders-x_forwarded_host">xForwardedHost</a></code></div>
<div class="type"><a href="#ProxyConfig-ProxyHeaders-XForwardedHost">XForwardedHost</a></div>
</div></td>
<td>
<p>Controls the <code>X-Forwarded-Host</code> header. If enabled, the <code>X-Forwarded-Host</code> header is appended
with the original host when it is rewritten.
This header is disabled by default.</p>
</td>
</tr>
<tr id="ProxyConfig-ProxyHeaders-x_forwarded_port">
<td><div class="field"><div class="name"><code><a href="#ProxyConfig-ProxyHeaders-x_forwarded_port">xForwardedPort</a></code></div>
<div class="type"><a href="#ProxyConfig-ProxyHeaders-XForwardedPort">XForwardedPort</a></div>
</div></td>
<td>
<p>Controls the <code>X-Forwarded-Port</code> header. If enabled, the <code>X-Forwarded-Port</code> header is header with the port value
client used to connect to Envoy. It will be ignored if the <code>x-forwarded-port</code> header has been set by any
trusted proxy in front of Envoy.
This header is disabled by default.</p>
</td>
</tr>
</tbody>
@ -4194,46 +4171,6 @@ This header is disabled by default.</p>
</tbody>
</table>
</section>
<h4 id="ProxyConfig-ProxyHeaders-XForwardedHost">XForwardedHost</h4>
<section>
<table class="message-fields">
<thead>
<tr>
<th>Field</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr id="ProxyConfig-ProxyHeaders-XForwardedHost-enabled">
<td><div class="field"><div class="name"><code><a href="#ProxyConfig-ProxyHeaders-XForwardedHost-enabled">enabled</a></code></div>
<div class="type"><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></div>
</div></td>
<td>
</td>
</tr>
</tbody>
</table>
</section>
<h4 id="ProxyConfig-ProxyHeaders-XForwardedPort">XForwardedPort</h4>
<section>
<table class="message-fields">
<thead>
<tr>
<th>Field</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr id="ProxyConfig-ProxyHeaders-XForwardedPort-enabled">
<td><div class="field"><div class="name"><code><a href="#ProxyConfig-ProxyHeaders-XForwardedPort-enabled">enabled</a></code></div>
<div class="type"><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></div>
</div></td>
<td>
</td>
</tr>
</tbody>
</table>
</section>
<h4 id="ProxyConfig-ProxyHeaders-EnvoyDebugHeaders">EnvoyDebugHeaders</h4>
<section>
<table class="message-fields">

58
content/en/docs/setup/upgrade/canary/canary_upgrade_test.sh
View File

@ -1,58 +0,0 @@
#!/usr/bin/env bash
# shellcheck disable=SC2154
# Copyright Istio Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
source "content/en/docs/setup/upgrade/canary/snips.sh"
source "tests/util/samples.sh"
source "content/en/boilerplates/snips/args.sh"
set -e
set -u
set -o pipefail
# @setup profile=none
previousVersionRevision1="${bpsnip_args_istio_previous_version//./-}-1"
# setup initial control plane
istioctl install --set profile=default --revision="$previousVersionRevision1" -y
# Deploy a test namespace with an application pod
snip_data_plane_2
snip_data_plane_3
snip_data_plane_4
_wait_for_deployment test-ns curl
# precheck before upgrade
_verify_lines snip_before_you_upgrade_1 "$snip_before_you_upgrade_1_out"
# install canary revision
echo y | snip_control_plane_1
_wait_for_deployment istio-system istiod-canary
_verify_like snip_control_plane_2 "$snip_control_plane_2_out"
_verify_like snip_control_plane_3 "$snip_control_plane_3_out"
_verify_contains snip_data_plane_1 "istiod-canary"
# Migrate the dataplane to new revision
snip_data_plane_5
snip_data_plane_6
_verify_contains snip_data_plane_7 "test-ns"
# Uninstall canary control plane
snip_uninstall_old_control_plane_1
_verify_like snip_uninstall_old_control_plane_3 "$snip_uninstall_old_control_plane_3_out"
# @cleanup
snip_uninstall_canary_control_plane_1
snip_cleanup_2

2
content/en/docs/setup/upgrade/canary/index.md
View File

@ -4,7 +4,7 @@ description: Upgrade Istio by first running a canary deployment of a new control
weight: 10
keywords: [kubernetes,upgrading,canary]
owner: istio/wg-environments-maintainers
test: yes
test: no
---
Upgrading Istio can be done by first running a canary deployment of the new control plane, allowing you

62
content/en/docs/setup/upgrade/canary/revision_tags_test.sh
View File

@ -1,62 +0,0 @@
#!/usr/bin/env bash
# shellcheck disable=SC2154
# Copyright Istio Authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
source "tests/util/samples.sh"
source "content/en/boilerplates/snips/args.sh"
set -e
set -u
set -o pipefail
# @setup profile=none
fullVersionRevision="${bpsnip_args_istio_full_version//./-}"
previousVersionRevision1="${bpsnip_args_istio_previous_version//./-}-1"
# setup two control plane revisions
snip_usage_1
_wait_for_deployment istio-system istiod-"$previousVersionRevision1"
_wait_for_deployment istio-system istiod-"$fullVersionRevision"
# tag the revisions
snip_usage_2
# deploy app namespaces and label them
snip_usage_3
snip_usage_4
_wait_for_deployment app-ns-1 curl
_wait_for_deployment app-ns-2 curl
_wait_for_deployment app-ns-3 curl
# verify both the revisions are managing workloads
_verify_contains snip_usage_5 "istiod-$previousVersionRevision1"
_verify_contains snip_usage_5 "istiod-$fullVersionRevision"
# update the stable revision
snip_usage_6
# restart the older stable revision namespaces
snip_usage_7
# verify only the canary revision is managing workloads
_verify_not_contains snip_usage_8 "istiod-$previousVersionRevision1"
_verify_contains snip_usage_8 "istiod-$fullVersionRevision"
# @cleanup
snip_cleanup_1
istioctl uninstall --purge -y
snip_cleanup_3
kubectl get validatingwebhookconfiguration --no-headers=true | awk '/^istio/ {print $1}' | xargs kubectl delete validatingwebhookconfiguration
kubectl get mutatingwebhookconfiguration --no-headers=true | awk '/^istio/ {print $1}' | xargs kubectl delete mutatingwebhookconfiguration

192
content/en/docs/setup/upgrade/canary/snips.sh
View File

@ -1,192 +0,0 @@
#!/bin/bash
# shellcheck disable=SC2034,SC2153,SC2155,SC2164
# Copyright Istio Authors. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
####################################################################################################
# WARNING: THIS IS AN AUTO-GENERATED FILE, DO NOT EDIT. PLEASE MODIFY THE ORIGINAL MARKDOWN FILE:
# docs/setup/upgrade/canary/index.md
####################################################################################################
source "content/en/boilerplates/snips/revision-tags-middle.sh"
source "content/en/boilerplates/snips/revision-tags-prologue.sh"
snip_before_you_upgrade_1() {
istioctl x precheck
}
! IFS=$'\n' read -r -d '' snip_before_you_upgrade_1_out <<\ENDSNIP
✔ No issues found when checking the cluster. Istio is safe to install or upgrade!
To get started, check out https://istio.io/latest/docs/setup/getting-started/
ENDSNIP
snip_control_plane_1() {
istioctl install --set revision=canary
}
snip_control_plane_2() {
kubectl get pods -n istio-system -l app=istiod
}
! IFS=$'\n' read -r -d '' snip_control_plane_2_out <<\ENDSNIP
NAME READY STATUS RESTARTS AGE
istiod-1-26-1-bdf5948d5-htddg 1/1 Running 0 47s
istiod-canary-84c8d4dcfb-skcfv 1/1 Running 0 25s
ENDSNIP
snip_control_plane_3() {
kubectl get svc -n istio-system -l app=istiod
}
! IFS=$'\n' read -r -d '' snip_control_plane_3_out <<\ENDSNIP
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
istiod-1-26-1 ClusterIP 10.96.93.151 <none> 15010/TCP,15012/TCP,443/TCP,15014/TCP 109s
istiod-canary ClusterIP 10.104.186.250 <none> 15010/TCP,15012/TCP,443/TCP,15014/TCP 87s
ENDSNIP
snip_control_plane_4() {
kubectl get mutatingwebhookconfigurations
}
! IFS=$'\n' read -r -d '' snip_control_plane_4_out <<\ENDSNIP
NAME WEBHOOKS AGE
istio-sidecar-injector-1-26-1 2 2m16s
istio-sidecar-injector-canary 2 114s
ENDSNIP
snip_data_plane_1() {
istioctl proxy-status | grep "$(kubectl -n istio-system get pod -l app=istio-ingressgateway -o jsonpath='{.items..metadata.name}')" | awk -F '[[:space:]][[:space:]]+' '{print $8}'
}
! IFS=$'\n' read -r -d '' snip_data_plane_1_out <<\ENDSNIP
istiod-canary-6956db645c-vwhsk
ENDSNIP
snip_data_plane_2() {
kubectl create ns test-ns
}
snip_data_plane_3() {
kubectl label namespace test-ns istio-injection=enabled
}
snip_data_plane_4() {
kubectl apply -n test-ns -f samples/curl/curl.yaml
}
snip_data_plane_5() {
kubectl label namespace test-ns istio-injection- istio.io/rev=canary
}
snip_data_plane_6() {
kubectl rollout restart deployment -n test-ns
}
snip_data_plane_7() {
istioctl proxy-status | grep "\.test-ns "
}
snip_usage_1() {
istioctl install --revision=1-26-1 --set profile=minimal --skip-confirmation
istioctl install --revision=1-27-0 --set profile=minimal --skip-confirmation
}
snip_usage_2() {
istioctl tag set prod-stable --revision 1-26-1
istioctl tag set prod-canary --revision 1-27-0
}
snip_usage_3() {
kubectl create ns app-ns-1
kubectl label ns app-ns-1 istio.io/rev=prod-stable
kubectl create ns app-ns-2
kubectl label ns app-ns-2 istio.io/rev=prod-stable
kubectl create ns app-ns-3
kubectl label ns app-ns-3 istio.io/rev=prod-canary
}
snip_usage_4() {
kubectl apply -n app-ns-1 -f samples/curl/curl.yaml
kubectl apply -n app-ns-2 -f samples/curl/curl.yaml
kubectl apply -n app-ns-3 -f samples/curl/curl.yaml
}
snip_usage_5() {
istioctl ps
}
! IFS=$'\n' read -r -d '' snip_usage_5_out <<\ENDSNIP
NAME CLUSTER CDS LDS EDS RDS ECDS ISTIOD VERSION
curl-78ff5975c6-62pzf.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-27-0-7f6fc6cfd6-s8zfg 1.27.0
curl-78ff5975c6-8kxpl.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-26-1-bdf5948d5-n72r2 1.26.1
curl-78ff5975c6-8q7m6.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-26-1-bdf5948d5-n72r2 1-26.1
ENDSNIP
snip_usage_6() {
istioctl tag set prod-stable --revision 1-27-0 --overwrite
}
snip_usage_7() {
kubectl rollout restart deployment -n app-ns-1
kubectl rollout restart deployment -n app-ns-2
}
snip_usage_8() {
istioctl ps
}
! IFS=$'\n' read -r -d '' snip_usage_8_out <<\ENDSNIP
NAME CLUSTER CDS LDS EDS RDS ECDS ISTIOD VERSION
curl-5984f48bc7-kmj6x.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-27-0-7f6fc6cfd6-jsktb 1.27.0
curl-78ff5975c6-jldk4.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-27-0-7f6fc6cfd6-jsktb 1.27.0
curl-7cdd8dccb9-5bq5n.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-27-0-7f6fc6cfd6-jsktb 1.27.0
ENDSNIP
snip_default_tag_1() {
istioctl tag set default --revision 1-27-0
}
snip_uninstall_old_control_plane_1() {
istioctl uninstall --revision 1-26-1 -y
}
snip_uninstall_old_control_plane_2() {
istioctl uninstall -f manifests/profiles/default.yaml -y
}
snip_uninstall_old_control_plane_3() {
kubectl get pods -n istio-system -l app=istiod
}
! IFS=$'\n' read -r -d '' snip_uninstall_old_control_plane_3_out <<\ENDSNIP
NAME READY STATUS RESTARTS AGE
istiod-canary-55887f699c-t8bh8 1/1 Running 0 27m
ENDSNIP
snip_uninstall_canary_control_plane_1() {
istioctl uninstall --revision=canary -y
}
snip_cleanup_1() {
istioctl tag remove prod-stable
istioctl tag remove prod-canary
}
snip_cleanup_2() {
kubectl delete ns istio-system test-ns
}
snip_cleanup_3() {
kubectl delete ns istio-system app-ns-1 app-ns-2 app-ns-3
}

10
content/en/docs/tasks/security/authentication/authn-policy/snips.sh
View File

@ -298,7 +298,7 @@ spec:
istio: ingressgateway
jwtRules:
- issuer: "testing@secure.istio.io"
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/jwks.json"
EOF
}
@ -316,7 +316,7 @@ spec:
name: httpbin-gateway
jwtRules:
- issuer: "testing@secure.istio.io"
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/jwks.json"
EOF
}
@ -337,7 +337,7 @@ curl --header "Authorization: Bearer deadbeef" "$INGRESS_HOST:$INGRESS_PORT/head
ENDSNIP
snip_enduser_authentication_9() {
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s)
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/demo.jwt -s)
curl --header "Authorization: Bearer $TOKEN" "$INGRESS_HOST:$INGRESS_PORT/headers" -s -o /dev/null -w "%{http_code}\n"
}
@ -346,11 +346,11 @@ curl --header "Authorization: Bearer $TOKEN" "$INGRESS_HOST:$INGRESS_PORT/header
ENDSNIP
snip_enduser_authentication_10() {
wget --no-verbose https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/gen-jwt.py
wget --no-verbose https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/gen-jwt.py
}
snip_enduser_authentication_11() {
wget --no-verbose https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/key.pem
wget --no-verbose https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/key.pem
}
snip_enduser_authentication_12() {

4
content/en/docs/tasks/security/authentication/claim-to-header/snips.sh
View File

@ -48,7 +48,7 @@ spec:
app: httpbin
jwtRules:
- issuer: "testing@secure.istio.io"
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/jwks.json"
outputClaimToHeaders:
- header: "x-jwt-claim-foo"
claim: "foo"
@ -64,7 +64,7 @@ kubectl exec "$(kubectl get pod -l app=curl -n foo -o jsonpath={.items..metadata
ENDSNIP
snip_allow_requests_with_valid_jwt_and_listtyped_claims_3() {
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode -
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode -
}
! IFS=$'\n' read -r -d '' snip_allow_requests_with_valid_jwt_and_listtyped_claims_3_out <<\ENDSNIP

6
content/en/docs/tasks/security/authentication/jwt-route/snips.sh
View File

@ -47,7 +47,7 @@ spec:
istio: ingressgateway
jwtRules:
- issuer: "testing@secure.istio.io"
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/jwks.json"
EOF
}
@ -97,7 +97,7 @@ HTTP/1.1 401 Unauthorized
ENDSNIP
snip_validating_ingress_routing_based_on_jwt_claims_3() {
TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
}
! IFS=$'\n' read -r -d '' snip_validating_ingress_routing_based_on_jwt_claims_3_out <<\ENDSNIP
@ -114,7 +114,7 @@ HTTP/1.1 200 OK
ENDSNIP
snip_validating_ingress_routing_based_on_jwt_claims_5() {
TOKEN_NO_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN_NO_GROUP" | cut -d '.' -f2 - | base64 --decode
TOKEN_NO_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN_NO_GROUP" | cut -d '.' -f2 - | base64 --decode
}
! IFS=$'\n' read -r -d '' snip_validating_ingress_routing_based_on_jwt_claims_5_out <<\ENDSNIP

2
content/en/docs/tasks/security/authorization/authz-custom/snips.sh
View File

@ -36,7 +36,7 @@ kubectl exec "$(kubectl get pod -l app=curl -n foo -o jsonpath={.items..metadata
ENDSNIP
snip_deploy_the_external_authorizer_1() {
kubectl apply -n foo -f https://raw.githubusercontent.com/istio/istio/master/samples/extauthz/ext-authz.yaml
kubectl apply -n foo -f https://raw.githubusercontent.com/istio/istio/release-1.27/samples/extauthz/ext-authz.yaml
}
! IFS=$'\n' read -r -d '' snip_deploy_the_external_authorizer_1_out <<\ENDSNIP

6
content/en/docs/tasks/security/authorization/authz-jwt/snips.sh
View File

@ -47,7 +47,7 @@ spec:
app: httpbin
jwtRules:
- issuer: "testing@secure.istio.io"
jwksUri: "https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/jwks.json"
jwksUri: "https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/jwks.json"
EOF
}
@ -87,7 +87,7 @@ EOF
}
snip_allow_requests_with_valid_jwt_and_listtyped_claims_5() {
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode
TOKEN=$(curl https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/demo.jwt -s) && echo "$TOKEN" | cut -d '.' -f2 - | base64 --decode
}
! IFS=$'\n' read -r -d '' snip_allow_requests_with_valid_jwt_and_listtyped_claims_5_out <<\ENDSNIP
@ -133,7 +133,7 @@ EOF
}
snip_allow_requests_with_valid_jwt_and_listtyped_claims_9() {
TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/master/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
TOKEN_GROUP=$(curl https://raw.githubusercontent.com/istio/istio/release-1.27/security/tools/jwt/samples/groups-scope.jwt -s) && echo "$TOKEN_GROUP" | cut -d '.' -f2 - | base64 --decode
}
! IFS=$'\n' read -r -d '' snip_allow_requests_with_valid_jwt_and_listtyped_claims_9_out <<\ENDSNIP

12
content/zh/docs/reference/commands/install-cni/index.html
View File

@ -613,12 +613,6 @@ https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#fip
<td><code>true</code></td>
<td>If enabled, Istio merge destinationrules considering their exportTo fields, they will be kept as independent rules if the exportTos are not equal.</td>
</tr>
<tr id='enable-gateway-api-inference-extension'>
<td><a href='#enable-gateway-api-inference-extension'><code>ENABLE_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='enable-gateway-api-manual-deployment'>
<td><a href='#enable-gateway-api-manual-deployment'><code>ENABLE_GATEWAY_API_MANUAL_DEPLOYMENT</code></a></td>
<td>Boolean</td>
@ -1565,6 +1559,12 @@ Only applies when traffic from all groups (i.e. &#34;*&#34;) is being redirected
<td><code>false</code></td>
<td>Whether to use insecure TLS in kubeconfig file</td>
</tr>
<tr id='support-gateway-api-inference-extension'>
<td><a href='#support-gateway-api-inference-extension'><code>SUPPORT_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='system-namespace'>
<td><a href='#system-namespace'><code>SYSTEM_NAMESPACE</code></a></td>
<td>String</td>

63
content/zh/docs/reference/commands/istioctl/index.html
View File

@ -201,11 +201,6 @@ debug and diagnose their Istio mesh.
<td>Comma-separated list of output logging level for scopes in the format of &lt;scope&gt;:&lt;level&gt;[,&lt;scope&gt;:&lt;level&gt;,...]. Possible values for &lt;level&gt;: none, error, warn, info, debug (default ``)</td>
</tr>
<tr>
<td><code>--log-reset</code></td>
<td></td>
<td>Reset log levels to default value. (info) </td>
</tr>
<tr>
<td><code>--namespace &lt;string&gt;</code></td>
<td><code>-n</code></td>
<td>Kubernetes namespace (default ``)</td>
@ -218,7 +213,7 @@ debug and diagnose their Istio mesh.
<tr>
<td><code>--reset</code></td>
<td></td>
<td>Reset all levels to default value. (info) </td>
<td>Reset levels to default value. (info) </td>
</tr>
<tr>
<td><code>--revision &lt;string&gt;</code></td>
@ -236,11 +231,6 @@ debug and diagnose their Istio mesh.
<td>Comma-separated list of stack trace level for scopes in the format of &lt;scope&gt;:&lt;stack-trace-level&gt;[,&lt;scope&gt;:&lt;stack-trace-level&gt;,...]. Possible values for &lt;stack-trace-level&gt;: none, error, warn, info, debug (default ``)</td>
</tr>
<tr>
<td><code>--stack-trace-reset</code></td>
<td></td>
<td>Reset stack stace levels to default value. (none) </td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
@ -616,11 +606,6 @@ All names except label and annotation keys support &#39;*&#39; glob matching pat
<td>Set a specific directory for output archive file. (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--rq-concurrency &lt;int&gt;</code></td>
<td></td>
<td>Set the concurrency limit of requests to the Kubernetes API server, defaults to 32. (default `0`)</td>
@ -761,11 +746,6 @@ All names except label and annotation keys support &#39;*&#39; glob matching pat
<td>Set a specific directory for output archive file. (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--rq-concurrency &lt;int&gt;</code></td>
<td></td>
<td>Set the concurrency limit of requests to the Kubernetes API server, defaults to 32. (default `0`)</td>
@ -2457,11 +2437,6 @@ from multiple sources (mesh-level, namespace-level and workload-level).</p>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
@ -2807,11 +2782,6 @@ the configuration objects that affect that pod.</p>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
@ -2819,7 +2789,7 @@ the configuration objects that affect that pod.</p>
</tbody>
</table>
<h4 id="istioctl-experimental-describe-pod Examples">Examples</h4>
<pre class="language-bash"><code> # Pod query with inferred namespace (current context&#39;s namespace)
<pre class="language-bash"><code> #Pod query with inferred namespace (current context&#39;s namespace)
istioctl experimental describe pod helloworld-v1-676yyy3y5r-d8hdl
# Pod query with explicit namespace
@ -2891,11 +2861,6 @@ the configuration objects that affect that service.</p>
<td>Kubernetes namespace (default ``)</td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--vklog &lt;Level&gt;</code></td>
<td></td>
<td>number for the log level verbosity. Like -v flag. ex: --vklog=9 (default `0`)</td>
@ -2903,7 +2868,7 @@ the configuration objects that affect that service.</p>
</tbody>
</table>
<h4 id="istioctl-experimental-describe-service Examples">Examples</h4>
<pre class="language-bash"><code> # Service query with inferred namespace (current context&#39;s namespace)
<pre class="language-bash"><code> #Service query with inferred namespace (current context&#39;s namespace)
istioctl experimental describe service productpage
# Service query with explicit namespace
@ -3550,11 +3515,6 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<td>Use plain-text HTTP/2 when connecting to server (no TLS). </td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--revision &lt;string&gt;</code></td>
<td><code>-r</code></td>
<td>Control plane revision (default ``)</td>
@ -6185,11 +6145,6 @@ Retrieves last sent and last acknowledged xDS sync from Istiod to each Envoy in
<td>Use plain-text HTTP/2 when connecting to server (no TLS). </td>
</tr>
<tr>
<td><code>--proxy-admin-port &lt;int&gt;</code></td>
<td></td>
<td>Envoy proxy admin port (default `15000`)</td>
</tr>
<tr>
<td><code>--revision &lt;string&gt;</code></td>
<td><code>-r</code></td>
<td>Control plane revision (default ``)</td>
@ -8539,12 +8494,6 @@ https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#fip
<td><code>true</code></td>
<td>If enabled, Istio merge destinationrules considering their exportTo fields, they will be kept as independent rules if the exportTos are not equal.</td>
</tr>
<tr id='enable-gateway-api-inference-extension'>
<td><a href='#enable-gateway-api-inference-extension'><code>ENABLE_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='enable-gateway-api-manual-deployment'>
<td><a href='#enable-gateway-api-manual-deployment'><code>ENABLE_GATEWAY_API_MANUAL_DEPLOYMENT</code></a></td>
<td>Boolean</td>
@ -9449,6 +9398,12 @@ Only applies when traffic from all groups (i.e. &#34;*&#34;) is being redirected
<td><code></code></td>
<td>Additional config map to load for shared MeshConfig settings. The standard mesh config will take precedence.</td>
</tr>
<tr id='support-gateway-api-inference-extension'>
<td><a href='#support-gateway-api-inference-extension'><code>SUPPORT_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='term'>
<td><a href='#term'><code>TERM</code></a></td>
<td>String</td>

12
content/zh/docs/reference/commands/pilot-agent/index.html
View File

@ -876,12 +876,6 @@ https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#fip
<td><code>true</code></td>
<td>If enabled, Istio merge destinationrules considering their exportTo fields, they will be kept as independent rules if the exportTos are not equal.</td>
</tr>
<tr id='enable-gateway-api-inference-extension'>
<td><a href='#enable-gateway-api-inference-extension'><code>ENABLE_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='enable-gateway-api-manual-deployment'>
<td><a href='#enable-gateway-api-manual-deployment'><code>ENABLE_GATEWAY_API_MANUAL_DEPLOYMENT</code></a></td>
<td>Boolean</td>
@ -1918,6 +1912,12 @@ Only applies when traffic from all groups (i.e. &#34;*&#34;) is being redirected
<td><code></code></td>
<td>Additional config map to load for shared MeshConfig settings. The standard mesh config will take precedence.</td>
</tr>
<tr id='support-gateway-api-inference-extension'>
<td><a href='#support-gateway-api-inference-extension'><code>SUPPORT_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='token-audiences'>
<td><a href='#token-audiences'><code>TOKEN_AUDIENCES</code></a></td>
<td>String</td>

18
content/zh/docs/reference/commands/pilot-discovery/index.html
View File

@ -268,17 +268,17 @@ If it is not installed already, you can install it via your OS&#39;s package man
<tr>
<td><code>--log_caller &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, tag-watcher, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] (default ``)</td>
<td>Comma-separated list of scopes for which to include caller information, scopes can be any of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] (default ``)</td>
</tr>
<tr>
<td><code>--log_output_level &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated minimum per-scope logging level of messages to output, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope&gt;:&lt;level&gt;,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, tag-watcher, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default ``)</td>
<td>Comma-separated minimum per-scope logging level of messages to output, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope&gt;:&lt;level&gt;,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default ``)</td>
</tr>
<tr>
<td><code>--log_stacktrace_level &lt;string&gt;</code></td>
<td></td>
<td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope:level&gt;,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, tag-watcher, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td>
<td>Comma-separated minimum per-scope logging level at which stack traces are captured, in the form of &lt;scope&gt;:&lt;level&gt;,&lt;scope:level&gt;,... where scope can be one of [ads, adsc, all, analysis, authn, authorization, ca, controllers, default, delta, deltaadsc, file, fullpush, gateway, grpc, grpcgen, ip-autoallocate, klog, krt, kube, model, monitoring, pkica, pkira, probes, processing, retry, rootcertrotator, secretcontroller, security, serverca, serviceentry, spiffe, status, trustBundle, untaint, validation, validationController, validationServer, wasm, wle] and level can be one of [debug, info, warn, error, fatal, none] (default `default:none`)</td>
</tr>
<tr>
<td><code>--log_target &lt;stringArray&gt;</code></td>
@ -539,12 +539,6 @@ https://www.envoyproxy.io/docs/envoy/latest/intro/arch_overview/security/ssl#fip
<td><code>true</code></td>
<td>If enabled, Istio merge destinationrules considering their exportTo fields, they will be kept as independent rules if the exportTos are not equal.</td>
</tr>
<tr id='enable-gateway-api-inference-extension'>
<td><a href='#enable-gateway-api-inference-extension'><code>ENABLE_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='enable-gateway-api-manual-deployment'>
<td><a href='#enable-gateway-api-manual-deployment'><code>ENABLE_GATEWAY_API_MANUAL_DEPLOYMENT</code></a></td>
<td>Boolean</td>
@ -1461,6 +1455,12 @@ Only applies when traffic from all groups (i.e. &#34;*&#34;) is being redirected
<td><code></code></td>
<td>Additional config map to load for shared MeshConfig settings. The standard mesh config will take precedence.</td>
</tr>
<tr id='support-gateway-api-inference-extension'>
<td><a href='#support-gateway-api-inference-extension'><code>SUPPORT_GATEWAY_API_INFERENCE_EXTENSION</code></a></td>
<td>Boolean</td>
<td><code>false</code></td>
<td>If true, support gateway inference extension routing apis</td>
</tr>
<tr id='token-audiences'>
<td><a href='#token-audiences'><code>TOKEN_AUDIENCES</code></a></td>
<td>String</td>

23
content/zh/docs/reference/config/annotations/index.html
View File

@ -11,29 +11,6 @@ weight: 60
This page presents the various resource <a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/">annotations</a> that
Istio supports to control its behavior.
</p>
<h2 id="AmbientBypassInboundCapture">ambient.istio.io/bypass-inbound-capture</h2>
<table class="annotations">
<tbody>
<tr>
<th>Name</th>
<td><code>ambient.istio.io/bypass-inbound-capture</code></td>
</tr>
<tr>
<th>Feature Status</th>
<td>Alpha</td>
</tr>
<tr>
<th>Resource Types</th>
<td>[Pod]</td>
</tr>
<tr>
<th>Description</th>
<td><p>When specified on a <code>Pod</code> enrolled in ambient mesh, only outbound traffic will be captured.
This is intended to be used when enrolling a workload that only receives traffic from out-of-the-mesh clients, such as third party ingress controllers.</p>
</td>
</tr>
</tbody>
</table>
<h2 id="AmbientRedirection">ambient.istio.io/redirection</h2>
<table class="annotations">
<tbody>

65
content/zh/docs/reference/config/istio.mesh.v1alpha1/index.html
View File

@ -7,7 +7,7 @@ location: https://istio.io/docs/reference/config/istio.mesh.v1alpha1.html
layout: protoc-gen-docs
generator: protoc-gen-docs
weight: 20
number_of_entries: 83
number_of_entries: 81
---
<p>Configuration affecting the service mesh as a whole.</p>
@ -4097,29 +4097,6 @@ to be lowercase per the protocol specification. Envoy will ignore this field for
requests and automatically normalize headers to lowercase, ensuring compliance with HTTP/2
standards.</p>
</td>
</tr>
<tr id="ProxyConfig-ProxyHeaders-x_forwarded_host">
<td><div class="field"><div class="name"><code><a href="#ProxyConfig-ProxyHeaders-x_forwarded_host">xForwardedHost</a></code></div>
<div class="type"><a href="#ProxyConfig-ProxyHeaders-XForwardedHost">XForwardedHost</a></div>
</div></td>
<td>
<p>Controls the <code>X-Forwarded-Host</code> header. If enabled, the <code>X-Forwarded-Host</code> header is appended
with the original host when it is rewritten.
This header is disabled by default.</p>
</td>
</tr>
<tr id="ProxyConfig-ProxyHeaders-x_forwarded_port">
<td><div class="field"><div class="name"><code><a href="#ProxyConfig-ProxyHeaders-x_forwarded_port">xForwardedPort</a></code></div>
<div class="type"><a href="#ProxyConfig-ProxyHeaders-XForwardedPort">XForwardedPort</a></div>
</div></td>
<td>
<p>Controls the <code>X-Forwarded-Port</code> header. If enabled, the <code>X-Forwarded-Port</code> header is header with the port value
client used to connect to Envoy. It will be ignored if the <code>x-forwarded-port</code> header has been set by any
trusted proxy in front of Envoy.
This header is disabled by default.</p>
</td>
</tr>
</tbody>
@ -4194,46 +4171,6 @@ This header is disabled by default.</p>
</tbody>
</table>
</section>
<h4 id="ProxyConfig-ProxyHeaders-XForwardedHost">XForwardedHost</h4>
<section>
<table class="message-fields">
<thead>
<tr>
<th>Field</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr id="ProxyConfig-ProxyHeaders-XForwardedHost-enabled">
<td><div class="field"><div class="name"><code><a href="#ProxyConfig-ProxyHeaders-XForwardedHost-enabled">enabled</a></code></div>
<div class="type"><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></div>
</div></td>
<td>
</td>
</tr>
</tbody>
</table>
</section>
<h4 id="ProxyConfig-ProxyHeaders-XForwardedPort">XForwardedPort</h4>
<section>
<table class="message-fields">
<thead>
<tr>
<th>Field</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr id="ProxyConfig-ProxyHeaders-XForwardedPort-enabled">
<td><div class="field"><div class="name"><code><a href="#ProxyConfig-ProxyHeaders-XForwardedPort-enabled">enabled</a></code></div>
<div class="type"><a href="https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#boolvalue">BoolValue</a></div>
</div></td>
<td>
</td>
</tr>
</tbody>
</table>
</section>
<h4 id="ProxyConfig-ProxyHeaders-EnvoyDebugHeaders">EnvoyDebugHeaders</h4>
<section>
<table class="message-fields">

2
data/args.yml
View File

@ -25,7 +25,7 @@ archive_date: YYYY-MM-DD
archive_search_refinement: "V1.1"
# GitHub branch names used when the docs have links to GitHub
source_branch_name: master
source_branch_name: release-1.27
doc_branch_name: master
####### Static values

30
go.mod
View File

@ -10,13 +10,13 @@ replace github.com/imdario/mergo => github.com/imdario/mergo v0.3.5
require (
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
golang.org/x/sync v0.15.0
istio.io/istio v0.0.0-20250607010753-ebe60fc2d88e
istio.io/istio v0.0.0-20250731100704-205b74bf531d
k8s.io/apimachinery v0.33.2
k8s.io/client-go v0.33.2
)
require (
cel.dev/expr v0.23.1 // indirect
cel.dev/expr v0.24.0 // indirect
cloud.google.com/go/compute/metadata v0.6.0 // indirect
dario.cat/mergo v1.0.2 // indirect
github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
@ -44,8 +44,8 @@ require (
github.com/docker/distribution v2.8.3+incompatible // indirect
github.com/docker/docker-credential-helpers v0.9.3 // indirect
github.com/emicklei/go-restful/v3 v3.12.2 // indirect
github.com/envoyproxy/go-control-plane/contrib v1.32.5-0.20250529131204-17588c61bef7 // indirect
github.com/envoyproxy/go-control-plane/envoy v1.32.5-0.20250529131204-17588c61bef7 // indirect
github.com/envoyproxy/go-control-plane/contrib v1.32.5-0.20250627145903-197b96a9c7f8 // indirect
github.com/envoyproxy/go-control-plane/envoy v1.32.5-0.20250627145903-197b96a9c7f8 // indirect
github.com/envoyproxy/protoc-gen-validate v1.2.1 // indirect
github.com/evanphx/json-patch/v5 v5.9.11 // indirect
github.com/exponent-io/jsonpath v0.0.0-20210407135951-1de76d718b3f // indirect
@ -55,7 +55,7 @@ require (
github.com/fxamacker/cbor/v2 v2.8.0 // indirect
github.com/go-errors/errors v1.5.1 // indirect
github.com/go-jose/go-jose/v4 v4.1.0 // indirect
github.com/go-logr/logr v1.4.2 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/go-openapi/jsonpointer v0.21.1 // indirect
github.com/go-openapi/jsonreference v0.21.0 // indirect
@ -79,6 +79,7 @@ require (
github.com/grafana/regexp v0.0.0-20240518133315-a468a5bfb3bc // indirect
github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 // indirect
github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2 // indirect
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 // indirect
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
@ -123,7 +124,7 @@ require (
github.com/planetscale/vtprotobuf v0.6.1-0.20240409071808-615f978279ca // indirect
github.com/prometheus/client_golang v1.22.0 // indirect
github.com/prometheus/client_model v0.6.2 // indirect
github.com/prometheus/common v0.63.0 // indirect
github.com/prometheus/common v0.65.0 // indirect
github.com/prometheus/procfs v0.16.1 // indirect
github.com/prometheus/prometheus v0.303.1 // indirect
github.com/quic-go/qpack v0.5.1 // indirect
@ -161,7 +162,7 @@ require (
go.opentelemetry.io/otel/sdk v1.35.0 // indirect
go.opentelemetry.io/otel/sdk/metric v1.35.0 // indirect
go.opentelemetry.io/otel/trace v1.35.0 // indirect
go.opentelemetry.io/proto/otlp v1.6.0 // indirect
go.opentelemetry.io/proto/otlp v1.7.0 // indirect
go.uber.org/atomic v1.11.0 // indirect
go.uber.org/automaxprocs v1.6.0 // indirect
go.uber.org/mock v0.5.2 // indirect
@ -170,7 +171,7 @@ require (
golang.org/x/crypto v0.39.0 // indirect
golang.org/x/exp v0.0.0-20250506013437-ce4c2cf36ca6 // indirect
golang.org/x/mod v0.25.0 // indirect
golang.org/x/net v0.40.0 // indirect
golang.org/x/net v0.41.0 // indirect
golang.org/x/oauth2 v0.30.0 // indirect
golang.org/x/sys v0.33.0 // indirect
golang.org/x/term v0.32.0 // indirect
@ -178,9 +179,9 @@ require (
golang.org/x/time v0.11.0 // indirect
golang.org/x/tools v0.33.0 // indirect
gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20250505200425-f936aa4a68b2 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20250505200425-f936aa4a68b2 // indirect
google.golang.org/grpc v1.72.2 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20250603155806-513f23925822 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20250603155806-513f23925822 // indirect
google.golang.org/grpc v1.73.0 // indirect
google.golang.org/protobuf v1.36.6 // indirect
gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
gopkg.in/inf.v0 v0.9.1 // indirect
@ -188,8 +189,8 @@ require (
gopkg.in/yaml.v2 v2.4.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
helm.sh/helm/v3 v3.18.4 // indirect
istio.io/api v1.26.0-beta.0 // indirect
istio.io/client-go v1.26.0-beta.0 // indirect
istio.io/api v1.27.0-beta.0.0.20250731082105-36763529c462 // indirect
istio.io/client-go v1.27.0-beta.0.0.20250731082605-b098a6e566f4 // indirect
k8s.io/api v0.33.2 // indirect
k8s.io/apiextensions-apiserver v0.33.2 // indirect
k8s.io/apiserver v0.33.2 // indirect
@ -200,8 +201,9 @@ require (
k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect
k8s.io/kubectl v0.33.2 // indirect
k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 // indirect
sigs.k8s.io/controller-runtime v0.20.4 // indirect
sigs.k8s.io/controller-runtime v0.21.0 // indirect
sigs.k8s.io/gateway-api v1.3.0 // indirect
sigs.k8s.io/gateway-api-inference-extension v0.0.0-20250627230429-b20b9998a164 // indirect
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
sigs.k8s.io/kustomize/api v0.19.0 // indirect
sigs.k8s.io/kustomize/kyaml v0.19.0 // indirect

64
go.sum
View File

@ -1,5 +1,5 @@
cel.dev/expr v0.23.1 h1:K4KOtPCJQjVggkARsjG9RWXP6O4R73aHeJMa/dmCQQg=
cel.dev/expr v0.23.1/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw=
cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY=
cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw=
cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw=
cloud.google.com/go/compute/metadata v0.6.0 h1:A6hENjEsCDtC1k8byVsgwvVcioamEHvZ4j01OwKxG9I=
cloud.google.com/go/compute/metadata v0.6.0/go.mod h1:FjyFAW1MW0C203CEOMDTu3Dk1FlqW3Rga40jzHL4hfg=
@ -79,12 +79,12 @@ github.com/emicklei/go-restful/v3 v3.12.2/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRr
github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
github.com/envoyproxy/go-control-plane v0.13.5-0.20250416141339-b5bc3390bc94 h1:LD/vt8fAVneDi38XmLvsV5F01nxaN8lkeOVCHBL9eAo=
github.com/envoyproxy/go-control-plane v0.13.5-0.20250416141339-b5bc3390bc94/go.mod h1:Kf4hNGzgvzKhoKdlSXD+IZtG55h9r2SOpO1kRKLI03o=
github.com/envoyproxy/go-control-plane/contrib v1.32.5-0.20250529131204-17588c61bef7 h1:ULIGbrmUTb9pVAfQJsblNUGjgC/JJj4myOwH3+YeErA=
github.com/envoyproxy/go-control-plane/contrib v1.32.5-0.20250529131204-17588c61bef7/go.mod h1:b/fqkGF5D7gbUZUWIFcFk5mPCPGc9XQpdu0OnsxhBPQ=
github.com/envoyproxy/go-control-plane/envoy v1.32.5-0.20250529131204-17588c61bef7 h1:xVvUDtTYPyTSFxn1e5DFmoOfki2pjAsr/NWutYgyMIg=
github.com/envoyproxy/go-control-plane/envoy v1.32.5-0.20250529131204-17588c61bef7/go.mod h1:yu2wMJHLle4tLf5JseY7fsTStNTURZ2zAdL7Kv78W+4=
github.com/envoyproxy/go-control-plane v0.13.5-0.20250724022422-2c98449a79c3 h1:zNo+0m3s4Dv0CvKxquu+C26Iuw0QSttjqBDe3EuaO9c=
github.com/envoyproxy/go-control-plane v0.13.5-0.20250724022422-2c98449a79c3/go.mod h1:whHrEUXbTAzBJlzd3Gz4us5zEFP1gL6o3LbfA+a/xbg=
github.com/envoyproxy/go-control-plane/contrib v1.32.5-0.20250627145903-197b96a9c7f8 h1:KXgXPtBofHkRHr+8dO058dGZnLHapW7m0yJEgSYdAFA=
github.com/envoyproxy/go-control-plane/contrib v1.32.5-0.20250627145903-197b96a9c7f8/go.mod h1:Nx/YcyEeIcgjT13QwKHdcPmS060urxZ835MeO8cLOrg=
github.com/envoyproxy/go-control-plane/envoy v1.32.5-0.20250627145903-197b96a9c7f8 h1:/F9jLyfDeNr4iZxyibtKlZxCDqCFEhoYiLdc9VOZT2E=
github.com/envoyproxy/go-control-plane/envoy v1.32.5-0.20250627145903-197b96a9c7f8/go.mod h1:09qwbGVuSWWAyN5t/b3iyVfz5+z8QWGrzkoqm/8SbEs=
github.com/envoyproxy/go-control-plane/ratelimit v0.1.0 h1:/G9QYbddjL25KvtKTv3an9lx6VBE2cnb8wp1vEGNYGI=
github.com/envoyproxy/go-control-plane/ratelimit v0.1.0/go.mod h1:Wk+tMFAFbCXaJPzVVHnPgRKdUdwW/KdbRt94AzgRee4=
github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
@ -115,8 +115,8 @@ github.com/go-jose/go-jose/v4 v4.1.0/go.mod h1:GG/vqmYm3Von2nYiB2vGTXzdoNKE5tix5
github.com/go-kit/log v0.1.0/go.mod h1:zbhenjAZHb184qTLMA9ZjW7ThYL0H2mk7Q6pNt4vbaY=
github.com/go-logfmt/logfmt v0.5.0/go.mod h1:wCYkCAKZfumFQihp8CzCvQ3paCTfi41vtzG1KdI/P7A=
github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY=
github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
github.com/go-logr/logr v1.4.3 h1:CjnDlHq8ikf6E492q6eKboGOC0T8CDaOvkHCIg8idEI=
github.com/go-logr/logr v1.4.3/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
github.com/go-openapi/jsonpointer v0.21.1 h1:whnzv/pNXtK2FbX/W9yJfRmE2gsmkfahjMKB0fZvcic=
@ -174,6 +174,8 @@ github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 h1:+ngKgrYPPJr
github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 h1:UH//fgunKIs4JdUbpDl1VZCDaL56wXCB/5+wF6uHfaI=
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0/go.mod h1:g5qyo/la0ALbONm6Vbp88Yd8NsDy6rZz+RcrMPxvld8=
github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2 h1:sGm2vDRFUrQJO/Veii4h4zG2vvqG6uWNkBHSTqXOZk0=
github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2/go.mod h1:wd1YpapPLivG6nQgbf7ZkG1hhSOXDhhn4MLTknx2aAc=
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0 h1:Ovs26xHkKqVztRpIrF/92BcuyuQ/YW4NSIpoGtfXNho=
github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk=
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 h1:5ZPtiqj0JL5oKWmcsq4VMaAW5ukBEgSGXEN89zeH1Jo=
@ -295,8 +297,8 @@ github.com/prometheus/client_golang v1.22.0/go.mod h1:R7ljNsLXhuQXYZYtw6GAE9AZg8
github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=
github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=
github.com/prometheus/common v0.63.0 h1:YR/EIY1o3mEFP/kZCD7iDMnLPlGyuU2Gb3HIcXnA98k=
github.com/prometheus/common v0.63.0/go.mod h1:VVFF/fBIoToEnWRVkYoXEkq3R3paCoxG9PXP74SnV18=
github.com/prometheus/common v0.65.0 h1:QDwzd+G1twt//Kwj/Ww6E9FQq1iVMmODnILtW1t2VzE=
github.com/prometheus/common v0.65.0/go.mod h1:0gZns+BLRQ3V6NdaerOhMbwwRbNh9hkGINtQAsP5GS8=
github.com/prometheus/procfs v0.16.1 h1:hZ15bTNuirocR6u0JZ6BAHHmwS1p8B4P6MRqxtzMyRg=
github.com/prometheus/procfs v0.16.1/go.mod h1:teAbpZRB1iIAJYREa1LsoWUXykVXA1KlTmWl8x/U+Is=
github.com/prometheus/prometheus v0.303.1 h1:He/2jRE6sB23Ew38AIoR1WRR3fCMgPlJA2E0obD2WSY=
@ -398,8 +400,8 @@ go.opentelemetry.io/otel/sdk/metric v1.35.0 h1:1RriWBmCKgkeHEhM7a2uMjMUfP7MsOF5J
go.opentelemetry.io/otel/sdk/metric v1.35.0/go.mod h1:is6XYCUMpcKi+ZsOvfluY5YstFnhW0BidkR+gL+qN+w=
go.opentelemetry.io/otel/trace v1.35.0 h1:dPpEfJu1sDIqruz7BHFG3c7528f6ddfSWfFDVt/xgMs=
go.opentelemetry.io/otel/trace v1.35.0/go.mod h1:WUk7DtFp1Aw2MkvqGdwiXYDZZNvA/1J8o6xRXLrIkyc=
go.opentelemetry.io/proto/otlp v1.6.0 h1:jQjP+AQyTf+Fe7OKj/MfkDrmK4MNVtw2NpXsf9fefDI=
go.opentelemetry.io/proto/otlp v1.6.0/go.mod h1:cicgGehlFuNdgZkcALOCh3VE6K/u2tAjzlRhDwmVpZc=
go.opentelemetry.io/proto/otlp v1.7.0 h1:jX1VolD6nHuFzOYso2E73H85i92Mv8JQYk0K9vz09os=
go.opentelemetry.io/proto/otlp v1.7.0/go.mod h1:fSKjH6YJ7HDlwzltzyMj036AJ3ejJLCgCSHGj4efDDo=
go.uber.org/atomic v1.7.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
go.uber.org/atomic v1.11.0 h1:ZvwS0R+56ePWxUNi+Atn9dWONBPp/AUETXlHW0DxSjE=
go.uber.org/atomic v1.11.0/go.mod h1:LUxbIzbOniOlMKjJjyPfpl4v+PKK2cNJn91OQbhoJI0=
@ -440,8 +442,8 @@ golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn
golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
golang.org/x/net v0.40.0 h1:79Xs7wF06Gbdcg4kdCCIQArK11Z1hr5POQ6+fIYHNuY=
golang.org/x/net v0.40.0/go.mod h1:y0hY0exeL2Pku80/zKK7tpntoX23cqL3Oa6njdgRtds=
golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
golang.org/x/net v0.41.0/go.mod h1:B/K4NNqkfmg07DQYrbwvSluqCJOOXwUjeb/5lOisjbA=
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
golang.org/x/oauth2 v0.30.0 h1:dnDm7JmhM45NNpd8FDDeLhK6FwqbOf4MLCM9zb1BOHI=
golang.org/x/oauth2 v0.30.0/go.mod h1:B++QgG3ZKulg6sRPGD/mqlHQs5rB3Ml9erfeDY7xKlU=
@ -493,17 +495,17 @@ google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7
google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc=
google.golang.org/genproto v0.0.0-20200423170343-7949de9c1215/go.mod h1:55QSHmfGQM9UVYDPBsyGGes0y52j32PQ3BqQfXhyH3c=
google.golang.org/genproto/googleapis/api v0.0.0-20250505200425-f936aa4a68b2 h1:vPV0tzlsK6EzEDHNNH5sa7Hs9bd7iXR7B1tSiPepkV0=
google.golang.org/genproto/googleapis/api v0.0.0-20250505200425-f936aa4a68b2/go.mod h1:pKLAc5OolXC3ViWGI62vvC0n10CpwAtRcTNCFwTKBEw=
google.golang.org/genproto/googleapis/rpc v0.0.0-20250505200425-f936aa4a68b2 h1:IqsN8hx+lWLqlN+Sc3DoMy/watjofWiU8sRFgQ8fhKM=
google.golang.org/genproto/googleapis/rpc v0.0.0-20250505200425-f936aa4a68b2/go.mod h1:qQ0YXyHHx3XkvlzUtpXDkS29lDSafHMZBAZDc03LQ3A=
google.golang.org/genproto/googleapis/api v0.0.0-20250603155806-513f23925822 h1:oWVWY3NzT7KJppx2UKhKmzPq4SRe0LdCijVRwvGeikY=
google.golang.org/genproto/googleapis/api v0.0.0-20250603155806-513f23925822/go.mod h1:h3c4v36UTKzUiuaOKQ6gr3S+0hovBtUrXzTG/i3+XEc=
google.golang.org/genproto/googleapis/rpc v0.0.0-20250603155806-513f23925822 h1:fc6jSaCT0vBduLYZHYrBBNY4dsWuvgyff9noRNDdBeE=
google.golang.org/genproto/googleapis/rpc v0.0.0-20250603155806-513f23925822/go.mod h1:qQ0YXyHHx3XkvlzUtpXDkS29lDSafHMZBAZDc03LQ3A=
google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg=
google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY=
google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
google.golang.org/grpc v1.29.1/go.mod h1:itym6AZVZYACWQqET3MqgPpjcuV5QH3BxFS3IjizoKk=
google.golang.org/grpc v1.72.2 h1:TdbGzwb82ty4OusHWepvFWGLgIbNo1/SUynEN0ssqv8=
google.golang.org/grpc v1.72.2/go.mod h1:wH5Aktxcg25y1I3w7H69nHfXdOG3UiadoBtjh3izSDM=
google.golang.org/grpc v1.73.0 h1:VIWSmpI2MegBtTuFt5/JWy2oXxtjJ/e89Z70ImfD2ok=
google.golang.org/grpc v1.73.0/go.mod h1:50sbHOUqWoCQGI8V2HQLJM0B+LMlIUjNSZmow7EVBQc=
google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY=
google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@ -530,12 +532,12 @@ helm.sh/helm/v3 v3.18.4 h1:pNhnHM3nAmDrxz6/UC+hfjDY4yeDATQCka2/87hkZXQ=
helm.sh/helm/v3 v3.18.4/go.mod h1:WVnwKARAw01iEdjpEkP7Ii1tT1pTPYfM1HsakFKM3LI=
honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
istio.io/api v1.26.0-beta.0 h1:m1WxHjHdAOrjuz0YzSFgzlKRmf3hvVmspkWTM6FX/po=
istio.io/api v1.26.0-beta.0/go.mod h1:DTVGH6CLXj5W8FF9JUD3Tis78iRgT1WeuAnxfTz21Wg=
istio.io/client-go v1.26.0-beta.0 h1:Xwf5PyVcWQ/WRISL1EbWZSmAjWH5XkKdi84q+XdAzCE=
istio.io/client-go v1.26.0-beta.0/go.mod h1:1nRkn8XmI8AZVKElaLsC79jrVqS+PPIu1EczNvmGst8=
istio.io/istio v0.0.0-20250607010753-ebe60fc2d88e h1:JM7fSGsOL6IYOS+M6mLjJ1+yuSiHNRB183RWZEZ0Sfk=
istio.io/istio v0.0.0-20250607010753-ebe60fc2d88e/go.mod h1:ppxs2a2G96O/fu62gxGyzXj/EUpWqXpSJXUJDS64oWc=
istio.io/api v1.27.0-beta.0.0.20250731082105-36763529c462 h1:rmeRAAxlNrCj96Zlaf8r6YqU5kcU8Y7/96i29KPDHaY=
istio.io/api v1.27.0-beta.0.0.20250731082105-36763529c462/go.mod h1:DTVGH6CLXj5W8FF9JUD3Tis78iRgT1WeuAnxfTz21Wg=
istio.io/client-go v1.27.0-beta.0.0.20250731082605-b098a6e566f4 h1:mwO5Wx0H+xbEsyGHYRdWG8fjRw9Cr0EExleNW7SXQhM=
istio.io/client-go v1.27.0-beta.0.0.20250731082605-b098a6e566f4/go.mod h1:oUPY27HFv9fW32NtjxlgrRaa0dPIN6jYj/xGcjorLA0=
istio.io/istio v0.0.0-20250731100704-205b74bf531d h1:C0PGxe1fVHxjam9U/Iu7b50/DUl6iOs03Z+ZL8PnRys=
istio.io/istio v0.0.0-20250731100704-205b74bf531d/go.mod h1:1T5IhLX+H4dhPFps5Y/HBgrr7M2u96j5hb6XtL814Qs=
k8s.io/api v0.33.2 h1:YgwIS5jKfA+BZg//OQhkJNIfie/kmRsO0BmNaVSimvY=
k8s.io/api v0.33.2/go.mod h1:fhrbphQJSM2cXzCWgqU29xLDuks4mu7ti9vveEnpSXs=
k8s.io/apiextensions-apiserver v0.33.2 h1:6gnkIbngnaUflR3XwE1mCefN3YS8yTD631JXQhsU6M8=
@ -562,10 +564,12 @@ k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 h1:jgJW5IePPXLGB8e/1wvd0Ich9QE97
k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.32.1 h1:Cf+ed5N8038zbsaXFO7mKQDi/+VcSRafb0jM84KX5so=
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.32.1/go.mod h1:Ve9uj1L+deCXFrPOk1LpFXqTg7LCFzFso6PA48q/XZw=
sigs.k8s.io/controller-runtime v0.20.4 h1:X3c+Odnxz+iPTRobG4tp092+CvBU9UK0t/bRf+n0DGU=
sigs.k8s.io/controller-runtime v0.20.4/go.mod h1:xg2XB0K5ShQzAgsoujxuKN4LNXR2LfwwHsPj7Iaw+XY=
sigs.k8s.io/controller-runtime v0.21.0 h1:CYfjpEuicjUecRk+KAeyYh+ouUBn4llGyDYytIGcJS8=
sigs.k8s.io/controller-runtime v0.21.0/go.mod h1:OSg14+F65eWqIu4DceX7k/+QRAbTTvxeQSNSOQpukWM=
sigs.k8s.io/gateway-api v1.3.0 h1:q6okN+/UKDATola4JY7zXzx40WO4VISk7i9DIfOvr9M=
sigs.k8s.io/gateway-api v1.3.0/go.mod h1:d8NV8nJbaRbEKem+5IuxkL8gJGOZ+FJ+NvOIltV8gDk=
sigs.k8s.io/gateway-api-inference-extension v0.0.0-20250627230429-b20b9998a164 h1:4YdkK0Kb4/vQH0ndTJtRzsTWnZEiJG6BqSsURG4+cv8=
sigs.k8s.io/gateway-api-inference-extension v0.0.0-20250627230429-b20b9998a164/go.mod h1:xgeYdEPZf/+87+Dp5zcz2vhbezBHjTg8lAfpPU2Xgp8=
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE=
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
sigs.k8s.io/kustomize/api v0.19.0 h1:F+2HB2mU1MSiR9Hp1NEgoU2q9ItNOaBJl0I4Dlus5SQ=

4
scripts/get_gateway_api_version.sh
View File

@ -16,7 +16,9 @@
set -e
GATEWAY_VERSION=$(grep gateway-api go.mod | awk '{ print $2 }')
# Grepping with space is needed as there is now also a gateway-api-inference
# import that would also get added.
GATEWAY_VERSION=$(grep "gateway-api " go.mod | awk '{ print $2 }')
#echo "GATEWAY_VERSION=${GATEWAY_VERSION}"
if [[ $GATEWAY_VERSION == *"-"* ]]; then
#echo "Found -, GATEWAY_VERSION=${GATEWAY_VERSION}"