Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: istio/istio
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 1.15.3
Choose a base ref
...
head repository: istio/istio
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 1.15.4
Choose a head ref

Commits on Oct 21, 2022

  1. Copy the full SHA
    ae5772f View commit details
  2. Copy the full SHA
    98a2372 View commit details

Commits on Oct 26, 2022

  1. Copy the full SHA
    d0140f8 View commit details

Commits on Oct 27, 2022

  1. Copy the full SHA
    afd1dde View commit details

Commits on Oct 28, 2022

  1. Overwrite default tag instead of remove in non-revisioned installation (

    #41646)
    
    Co-authored-by: Karol Szwaj <karol.szwaj@gmail.com>
    istio-testing and cnvergence authored Oct 28, 2022
    Copy the full SHA
    ff8aa96 View commit details
  2. [release-1.15] Add delete configmap privilege to fix distribution rep…

    …ort cleanup (#41664)
    
    * Add delete configmap privilege to fix distribution report cleanup
    
    This fixes the following error during istiod shutdown when PILOT_ENABLE_STATUS=true:
    
    error   status  failed to properly clean up distribution report: configmaps "istiod-649887579d-rck66-distribution" is forbidden: User "system:serviceaccount:istio-system:istiod" cannot delete resource "configmaps" in API group "" in the namespace "istio-system"
    
    * Add release note
    
    Co-authored-by: Marko Lukša <marko.luksa@gmail.com>
    istio-testing and luksa authored Oct 28, 2022
    Copy the full SHA
    b6403f3 View commit details

Commits on Nov 1, 2022

  1. [release-1.15] fix pilotExists regression (#41707)

    * fix pilotExists regression (#41644)
    
    * fix pilotExists regression
    
    * add e2e test
    
    * add release-notes
    
    * fix lint & e2e
    zirain authored Nov 1, 2022
    Copy the full SHA
    230483e View commit details

Commits on Nov 2, 2022

  1. Copy the full SHA
    23becf2 View commit details
  2. Copy the full SHA
    1346699 View commit details
  3. Copy the full SHA
    0d6fc04 View commit details
  4. [release-1.15] [bug fix] Skip the pod inaccessible for `istioctl ps -…

    …-xds-via-agent` (#41739)
    
    * Skip the pod inaccessible when iterating the pods for proxy-status xds-via-agent
    
    Change-Id: If3b49dbff4567ac084f55e42533241e109d27525
    
    * use stderr
    
    Change-Id: I2ceaa75e0c4d1f8d44528118d8638b0974c67b31
    
    Co-authored-by: Ingwon Song <igsong@google.com>
    istio-testing and ingwonsong authored Nov 2, 2022
    Copy the full SHA
    44a9c95 View commit details

Commits on Nov 5, 2022

  1. Copy the full SHA
    e4ab206 View commit details

Commits on Nov 6, 2022

  1. Copy the full SHA
    d7fede4 View commit details

Commits on Nov 7, 2022

  1. Copy the full SHA
    2d75bd8 View commit details
  2. chiron: amend cert watch timeout for DNS certificates (#41843)

    Co-authored-by: Shankar Ganesan <shankgan@google.com>
    istio-testing and shankgan authored Nov 7, 2022
    Copy the full SHA
    448e8ba View commit details

Commits on Nov 8, 2022

  1. Copy the full SHA
    89079b7 View commit details

Commits on Nov 9, 2022

  1. Copy the full SHA
    66de62e View commit details
  2. Copy the full SHA
    81f138f View commit details
  3. [release-1.15] wasm: enhance fallback logic for the Wasm module downl…

    …oad failure (#41416) (#41757)
    
    * wasm: enhance fallback logic for the Wasm module download failure (#41416)
    
    * Fallback to passthrough filter if Wasm download fails
    
    Change-Id: Ie9954cd56072c92985ba0bb8605da76ec0a15edf
    
    * Add a flag for toggling deny-all or bypass-all
    
    Change-Id: I4c5ca61043210c95a5dda15c4c0ef3023f3f09ca
    
    * Add back the omitted sendNack checking
    
    Change-Id: I375aa4136481c6c0c3d8f2283d5b245c6171ad49
    
    * Add RBAC to allow-list in ExtensionConfigSource
    
    Change-Id: I0aef9ef4dc61d8b2cea169aa76ee3430da4e661c
    
    * Fix test cases and lint errors
    
    Change-Id: Ib20c371a88d5b1a85716af4dbba2da492f7a1ed2
    
    * add release notes
    
    Change-Id: I3c2337f4215fc9f82c81da1500340072161d0179
    
    * Use only wasm filter
    
    Change-Id: I238359d34defdb024a21514c69cbf6ce68b30051
    
    * update release note
    
    Change-Id: I5e416fa1ba46548a2ddf7496c7b47baca4ad93d3
    
    * revert the enhancement for 'fail_open=false' cases
    
    Change-Id: I8757b00e8971ba3f1074cc5931d25b6c96ce730a
    
    * Remove unnecessary code pieces
    
    Change-Id: I078f1e7b01eaccc90df2e46e821053a962a05820
    
    * Add a log
    
    Change-Id: Ia8b544b45ceb7ec70683313477171dbe31524864
    
    * Use RBAC filter instead of attributegen wasm filter
    
    Change-Id: I4200dacfe6959f2fcc4f2e9b99367c2cea31cab7
    
    * Add the integration test
    
    Change-Id: Iddb6b09244bece772ab093182fb85efdd677b3cc
    
    * Print stdout when error happen
    
    Change-Id: I0c20bf9b7427869f06168b83725bd6fd162ee841
    
    * Revert the changes in deployment.go and restart all the target pods
    
    Change-Id: Ibed81aef73aa60e8eae370981571c25202e0e6b2
    
    * Check the restart error
    
    Change-Id: I366e7c736689ffdcba7bd19896840ba2483325d0
    
    * Use API instead of kubectl for deployment.Restart in order to support multi cluster
    
    Change-Id: I12d5527bb3b6c73203f322b8ebeedc960cf1b4d4
    
    * fix lint errors
    
    Change-Id: I54dd59684adf8cd00cbfdfe7337c8792d3fdb81d
    
    * add quotes
    
    Change-Id: Ic24c5ab3ac9bb8876c73d39d5c740b27afc8b36f
    
    * use %q
    
    Change-Id: I192e61b04f7bbbb7cd0f5979ef416d96a77238f5
    
    * fix errors
    
    Change-Id: I28dbcdb0359fc70c9af7b4ac621ee2f38acbfa6b
    
    * reflect comments
    
    Change-Id: I93e5a423c422a67d4a871ffda8834a9c6d72f5c0
    
    * fix lint error
    
    Change-Id: I467ba3ab81e2daf2f9ff9ff4fdb842ef3061dd67
    
    * [bugfix] Fix restarting logic of deployment in the test framework (#41776)
    
    * Add more checks for ensuring the deployment complete
    
    Change-Id: I97e8e0bd741227e158319a25d75c3868d0957bb8
    
    * remove unnecessary waiting
    
    Change-Id: Ief3b1f35ed8ab019454a00c4f233ae0c59e6c410
    
    * Increase the timeout for restarting to 60s (#41795)
    
    Change-Id: I13815806215a6d3859819bb9326f9f13f44f1a14
    ingwonsong authored Nov 9, 2022
    Copy the full SHA
    1687852 View commit details

Commits on Nov 10, 2022

  1. Copy the full SHA
    caf6d42 View commit details
  2. Update to make prow/release-commit.sh executable after sed (#41864)

    Co-authored-by: Eric Van Norman <ericvn@us.ibm.com>
    istio-testing and Eric Van Norman authored Nov 10, 2022
    Copy the full SHA
    f3e097b View commit details
  3. Manual cherry-pick of #40578 (#41932)

    Eric Van Norman authored Nov 10, 2022
    Copy the full SHA
    d883634 View commit details

Commits on Nov 11, 2022

  1. [release-1.15] operator: add resourcequotas in clusterrole (#41947)

    * operator: add resourcequotas in clusterrole
    
    * add release-notes
    
    Co-authored-by: hejianpeng <hejianpeng2@huawei.com>
    istio-testing and zirain authored Nov 11, 2022
    Copy the full SHA
    7655802 View commit details
  2. [release-1.15] Manual cherrypick: "Check if metadata endpoint is avai…

    …lable and trigger GCP requests concurrently" 40105 (#41963)
    
    * Gcp concurrent requests (#40105)
    
    * Query GCP Instance Metadata concurrently
    
    Signed-off-by: rinormaloku <rinormaloku37@gmail.com>
    
    * Checking if GCP Metadata endpoint is available
    
    Signed-off-by: rinormaloku <rinormaloku37@gmail.com>
    
    * Checking if GCP Metadata endpoint is available
    
    Signed-off-by: rinormaloku <rinormaloku37@gmail.com>
    
    Signed-off-by: rinormaloku <rinormaloku37@gmail.com>
    
    * Fix sync issue in GCP platform (#40700)
    
    Signed-off-by: rinormaloku <rinormaloku37@gmail.com>
    Co-authored-by: Rinor Maloku <rinormaloku37@gmail.com>
    Co-authored-by: Aakash2017 <aakashshukla@google.com>
    3 people authored Nov 11, 2022
    Copy the full SHA
    0940a28 View commit details

Commits on Nov 14, 2022

  1. move gomod to 1.19 (#41989)

    Co-authored-by: hejianpeng <hejianpeng2@huawei.com>
    istio-testing and zirain authored Nov 14, 2022
    Copy the full SHA
    5724ce8 View commit details

Commits on Nov 17, 2022

  1. Copy the full SHA
    2ef0042 View commit details
  2. Fix gateway pods not respect global.imagePullPolicy (#42051)

    Co-authored-by: Kebe <kebe.liu@daocloud.io>
    istio-testing and kebe7jun authored Nov 17, 2022
    Copy the full SHA
    7f581e4 View commit details

Commits on Nov 18, 2022

  1. Copy the full SHA
    7852818 View commit details

Commits on Nov 19, 2022

  1. Copy the full SHA
    a231968 View commit details

Commits on Nov 22, 2022

  1. avoid using max stream duration for no timeout cases (#42086)

    Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
    
    Signed-off-by: Rama Chavali <rama.rao@salesforce.com>
    Co-authored-by: Rama Chavali <rama.rao@salesforce.com>
    istio-testing and ramaraochavali authored Nov 22, 2022
    Copy the full SHA
    ac34a51 View commit details
  2. Copy the full SHA
    ffb6edc View commit details

Commits on Nov 28, 2022

  1. Alwyays use sha256 when generating self-signed certs (#42183)

    When using LibreSSL 2.8.3 the generated certs are using SHA1. This
    causes istiod to fail to start up due to changes in go 1.18 (see
    golang/go#41682).
    
    This also fixes the instructiosn for
    https://istio.io/latest/docs/tasks/security/cert-management/plugin-ca-cert/
    
    Co-authored-by: Jacob Delgado <jacob.delgado@volunteers.acasi.info>
    istio-testing and jacob-delgado authored Nov 28, 2022
    Copy the full SHA
    76d3a7c View commit details

Commits on Nov 30, 2022

  1. Copy the full SHA
    905f1de View commit details

Commits on Dec 2, 2022

  1. [release-1.15] Update go modules (#40597) (#42239)

    * Update go modules (#40597)
    
    * Update go modules
    
    * lint
    
    * fmt
    
    Also ran: go get cloud.google.com/go/compute
    
    * Fixing some bad merges
    
    * gencheck
    
    * gencheck again
    
    Co-authored-by: John Howard <howardjohn@google.com>
    stewartbutler and howardjohn authored Dec 2, 2022
    Copy the full SHA
    b3e6526 View commit details

Commits on Dec 3, 2022

  1. Copy the full SHA
    20d5c55 View commit details

Commits on Dec 5, 2022

  1. Copy the full SHA
    fc3884f View commit details
  2. Copy the full SHA
    cf4d0dc View commit details

Commits on Dec 6, 2022

  1. Copy the full SHA
    3c32c3c View commit details

Commits on Dec 8, 2022

  1. Copy the full SHA
    35945e6 View commit details
  2. Copy the full SHA
    952b2e8 View commit details
Showing with 1,166 additions and 317 deletions.
  1. +1 −1 Makefile.core.mk
  2. +1 −0 bin/update_deps.sh
  3. +1 −1 common/.commonfiles.sha
  4. +1 −1 common/scripts/setup_env.sh
  5. +1 −1 docker/Dockerfile.distroless
  6. +23 −20 go.mod
  7. +38 −112 go.sum
  8. +1 −1 istio.deps
  9. +5 −1 istioctl/cmd/metrics_test.go
  10. +5 −3 istioctl/pkg/multixds/gather.go
  11. 0 licenses/cloud.google.com/go/compute/{ → metadata}/LICENSE
  12. +3 −0 manifests/charts/gateways/istio-egress/templates/injected-deployment.yaml
  13. +3 −0 manifests/charts/gateways/istio-ingress/templates/injected-deployment.yaml
  14. +5 −0 manifests/charts/istio-control/istio-discovery/files/gen-istio.yaml
  15. +6 −0 manifests/charts/istio-control/istio-discovery/templates/role.yaml
  16. +1 −0 manifests/charts/istio-operator/files/gen-operator.yaml
  17. +1 −0 manifests/charts/istio-operator/templates/clusterrole.yaml
  18. +6 −0 manifests/charts/istiod-remote/templates/role.yaml
  19. +0 −4 operator/cmd/mesh/install.go
  20. +14 −7 operator/pkg/helmreconciler/prune.go
  21. +127 −0 operator/pkg/helmreconciler/prune_test.go
  22. +19 −0 operator/pkg/helmreconciler/testdata/iop-test-gw-1.yaml
  23. +19 −0 operator/pkg/helmreconciler/testdata/iop-test-gw-2.yaml
  24. +2 −4 pilot/pkg/networking/core/v1alpha3/envoyfilter/extension_configuration_patch_test.go
  25. +4 −1 pilot/pkg/networking/core/v1alpha3/extension/wasmplugin.go
  26. +33 −34 pilot/pkg/networking/core/v1alpha3/listener_builder_test.go
  27. +5 −9 pilot/pkg/networking/core/v1alpha3/route/route.go
  28. +4 −4 pilot/pkg/networking/core/v1alpha3/route/route_test.go
  29. +1 −1 pilot/pkg/networking/grpcgen/grpcgen_test.go
  30. +2 −3 pilot/pkg/status/distribution/state_test.go
  31. +100 −31 pkg/bootstrap/platform/gcp.go
  32. +15 −9 pkg/bootstrap/platform/gcp_test.go
  33. +5 −4 pkg/config/schema/resource/schema_test.go
  34. +1 −0 pkg/config/xds/filters.go
  35. +1 −1 pkg/kube/client.go
  36. +21 −0 pkg/kube/inject/testdata/inject/gateway.yaml
  37. +148 −0 pkg/kube/inject/testdata/inject/gateway.yaml.injected
  38. +13 −2 pkg/kube/mock_client.go
  39. +1 −2 pkg/test/echo/cmd/client/main.go
  40. +65 −13 pkg/test/framework/components/echo/kube/deployment.go
  41. +2 −0 pkg/test/framework/features/features.yaml
  42. +22 −0 pkg/wasm/convert.go
  43. +6 −4 pkg/wasm/convert_test.go
  44. +1 −1 prow/release-commit.sh
  45. +10 −0 releasenotes/notes/40578.yaml
  46. +10 −0 releasenotes/notes/41161.yaml
  47. +9 −0 releasenotes/notes/41621.yaml
  48. +10 −0 releasenotes/notes/41644.yaml
  49. +29 −0 releasenotes/notes/fix-gateway-not-respect-image-pull-policy.yaml
  50. +8 −0 releasenotes/notes/wasm-download-fallback.yaml
  51. +1 −1 security/pkg/k8s/chiron/controller.go
  52. +246 −0 tests/integration/operator/uninstall_test.go
  53. +62 −35 tests/integration/telemetry/stats/prometheus/wasm/bad_wasm_filter_test.go
  54. +42 −0 tests/integration/telemetry/stats/prometheus/wasm/testdata/bad-wasm-envoy-filter-fail-open.yaml
  55. +6 −6 tools/certs/Makefile.selfsigned.mk
2 changes: 1 addition & 1 deletion Makefile.core.mk
Original file line number Diff line number Diff line change
@@ -38,7 +38,7 @@ SHELL := /bin/bash -o pipefail
export VERSION ?= 1.15-dev

# Base version of Istio image to use
BASE_VERSION ?= 1.15-2022-10-18T19-01-15
BASE_VERSION ?= 1.15-2022-12-05T19-01-24

export GO111MODULE ?= on
export GOPROXY ?= https://proxy.golang.org
1 change: 1 addition & 0 deletions bin/update_deps.sh
Original file line number Diff line number Diff line change
@@ -44,6 +44,7 @@ go get -u "istio.io/pkg@${UPDATE_BRANCH}"
go mod tidy

sed -i "s/^BUILDER_SHA=.*\$/BUILDER_SHA=$(getSha release-builder)/" prow/release-commit.sh
chmod +x prow/release-commit.sh
sed -i '/PROXY_REPO_SHA/,/lastStableSHA/ { s/"lastStableSHA":.*/"lastStableSHA": "'"$(getSha proxy)"'"/ }' istio.deps

# shellcheck disable=SC1001
2 changes: 1 addition & 1 deletion common/.commonfiles.sha
Original file line number Diff line number Diff line change
@@ -1 +1 @@
d8c7c7cf927c5873614bcb047dcf9871e0ea1274
e6ec94c3df2c96a06ccb2765e8cf11340483e59a
2 changes: 1 addition & 1 deletion common/scripts/setup_env.sh
Original file line number Diff line number Diff line change
@@ -73,7 +73,7 @@ fi

# Build image to use
if [[ "${IMAGE_VERSION:-}" == "" ]]; then
IMAGE_VERSION=release-1.15-75433625529f5fb0124f158bbc4d8a760a8f097a
IMAGE_VERSION=release-1.15-63441d793ee07acdee34469f8a193bc47e73a349
fi
if [[ "${IMAGE_NAME:-}" == "" ]]; then
IMAGE_NAME=build-tools
2 changes: 1 addition & 1 deletion docker/Dockerfile.distroless
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# prepare a distroless source context to copy files from
FROM gcr.io/distroless/static-debian11@sha256:f4787e810dbc39dd59fcee319cf88e8a01181e1758dbd07c32ed4e14a9ba8904 as distroless_source
FROM gcr.io/distroless/static-debian11@sha256:5759d194607e472ff80fff5833442d3991dd89b219c96552837a2c8f74058617 as distroless_source

# prepare a base dev to modify file contents
FROM ubuntu:focal as ubuntu_source
43 changes: 23 additions & 20 deletions go.mod
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
module istio.io/istio

go 1.18
go 1.19

// https://github.com/containerd/containerd/issues/5781
exclude k8s.io/kubernetes v1.13.0
@@ -9,8 +9,8 @@ exclude k8s.io/kubernetes v1.13.0
replace github.com/imdario/mergo => github.com/imdario/mergo v0.3.5

require (
cloud.google.com/go/compute v1.7.0
cloud.google.com/go/security v1.4.0
cloud.google.com/go/compute/metadata v0.1.0
cloud.google.com/go/security v1.8.0
contrib.go.opencensus.io/exporter/prometheus v0.4.1
github.com/AdaLogics/go-fuzz-headers v0.0.0-20220511133513-5ae53b7a8154
github.com/Masterminds/sprig/v3 v3.2.2
@@ -32,7 +32,7 @@ require (
github.com/gogo/protobuf v1.3.2
github.com/golang/protobuf v1.5.2
github.com/google/cel-go v0.11.4
github.com/google/go-cmp v0.5.8
github.com/google/go-cmp v0.5.9
github.com/google/go-containerregistry v0.10.0
github.com/google/gofuzz v1.2.0
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
@@ -70,23 +70,23 @@ require (
go.opentelemetry.io/proto/otlp v0.18.0
go.uber.org/atomic v1.9.0
go.uber.org/multierr v1.8.0
golang.org/x/net v0.0.0-20220624214902-1bab6f366d9e
golang.org/x/oauth2 v0.0.0-20220622183110-fd043fe589d2
golang.org/x/sync v0.0.0-20220601150217-0de741cfad7f
golang.org/x/sys v0.0.0-20220627191245-f75cf1eec38b
golang.org/x/net v0.0.0-20221014081412-f15817d10f9b
golang.org/x/oauth2 v0.0.0-20221014153046-6fdb5e3db783
golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0
golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10
golang.org/x/time v0.0.0-20220609170525-579cf78fd858
gomodules.xyz/jsonpatch/v3 v3.0.1
google.golang.org/api v0.85.0
google.golang.org/genproto v0.0.0-20220628213854-d9e0b6570c03
google.golang.org/grpc v1.47.0
google.golang.org/protobuf v1.28.0
google.golang.org/api v0.100.0
google.golang.org/genproto v0.0.0-20221024183307-1bc688fe9f3e
google.golang.org/grpc v1.50.1
google.golang.org/protobuf v1.28.1
gopkg.in/square/go-jose.v2 v2.6.0
gopkg.in/yaml.v2 v2.4.0
gopkg.in/yaml.v3 v3.0.1
helm.sh/helm/v3 v3.9.4
istio.io/api v0.0.0-20221013011440-bc935762d2b9
istio.io/client-go v1.15.3-0.20221013011840-bf461d2d5194
istio.io/pkg v0.0.0-20220907025138-198870de7239
istio.io/api v0.0.0-20221208152505-d807bc07da6a
istio.io/client-go v1.15.4-0.20221208153104-0efb244d0eb3
istio.io/pkg v0.0.0-20221101233122-4857dc812933
k8s.io/api v0.24.2
k8s.io/apiextensions-apiserver v0.24.2
k8s.io/apimachinery v0.24.2
@@ -105,10 +105,13 @@ require (

replace sigs.k8s.io/gateway-api => github.com/istio/gateway-api v0.0.0-20221006194514-510afb48c902

require github.com/emicklei/go-restful/v3 v3.8.0 // indirect
require (
cloud.google.com/go/compute v1.12.1 // indirect
github.com/emicklei/go-restful/v3 v3.8.0 // indirect
)

require (
cloud.google.com/go v0.102.0 // indirect
cloud.google.com/go v0.104.0 // indirect
cloud.google.com/go/logging v1.4.2 // indirect
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
@@ -161,8 +164,8 @@ require (
github.com/google/btree v1.0.1 // indirect
github.com/google/gnostic v0.5.7-v3refs // indirect
github.com/google/pprof v0.0.0-20220520215854-d04f2422c8a1 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.1.0 // indirect
github.com/googleapis/gax-go/v2 v2.4.0 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.2.0 // indirect
github.com/googleapis/gax-go/v2 v2.6.0 // indirect
github.com/grafana/regexp v0.0.0-20220304095617-2e8d9baf4ac2 // indirect
github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
github.com/hashicorp/errwrap v1.1.0 // indirect
@@ -242,7 +245,7 @@ require (
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211 // indirect
golang.org/x/text v0.3.7 // indirect
golang.org/x/tools v0.1.10 // indirect
golang.org/x/xerrors v0.0.0-20220609144429-65e65417b02f // indirect
golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
gomodules.xyz/jsonpatch/v2 v2.2.0 // indirect
gomodules.xyz/orderedmap v0.1.0 // indirect
google.golang.org/appengine v1.6.7 // indirect
Loading