bump istio to v1.20.3 (#1275)

Co-authored-by: dprotaso <dprotaso@gmail.com>
knative-extensions · Feb 23, 2024 · f43755b · f43755b
1 parent a21cc34
commit f43755b
Show file tree

Hide file tree

Showing 6 changed files with 40 additions and 20 deletions.
diff --git a/third_party/istio-latest/generate-manifests.sh b/third_party/istio-latest/generate-manifests.sh
@@ -16,4 +16,4 @@
 
 source "$(dirname $0)/../library.sh"
 
-generate "1.20.2" "$(dirname $0)"
+generate "1.20.3" "$(dirname $0)"
diff --git a/third_party/istio-latest/istio-ci-ambient/istio.yaml b/third_party/istio-latest/istio-ci-ambient/istio.yaml
@@ -8673,6 +8673,10 @@ data:
             {{ end }}
           }
         spec:
+          securityContext:
+            sysctls:
+            - name: net.ipv4.ip_unprivileged_port_start
+              value: "0"
           containers:
           - name: istio-proxy
           {{- if contains "/" .Values.global.proxy.image }}
@@ -9976,7 +9980,7 @@ data:
         "sts": {
           "servicePort": 0
         },
-        "tag": "1.20.2",
+        "tag": "1.20.3",
         "tracer": {
           "datadog": {},
           "lightstep": {},
@@ -10126,7 +10130,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: spec.nodeName
-          image: docker.io/istio/proxyv2:1.20.2
+          image: docker.io/istio/proxyv2:1.20.3
           name: istio-proxy
           ports:
             - containerPort: 15021
@@ -10330,7 +10334,7 @@ spec:
                   resource: limits.cpu
             - name: PLATFORM
               value: ""
-          image: docker.io/istio/pilot:1.20.2-distroless
+          image: docker.io/istio/pilot:1.20.3-distroless
           name: discovery
           ports:
             - containerPort: 8080
@@ -10810,7 +10814,7 @@ spec:
               valueFrom:
                 resourceFieldRef:
                   resource: limits.cpu
-          image: docker.io/istio/install-cni:1.20.2
+          image: docker.io/istio/install-cni:1.20.3
           name: install-cni
           readinessProbe:
             httpGet:
@@ -10926,7 +10930,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: spec.serviceAccountName
-          image: docker.io/istio/ztunnel:1.20.2-distroless
+          image: docker.io/istio/ztunnel:1.20.3-distroless
           name: istio-proxy
           ports:
             - containerPort: 15020

diff --git a/third_party/istio-latest/istio-ci-mesh/istio.yaml b/third_party/istio-latest/istio-ci-mesh/istio.yaml
@@ -8494,6 +8494,10 @@ data:
             {{ end }}
           }
         spec:
+          securityContext:
+            sysctls:
+            - name: net.ipv4.ip_unprivileged_port_start
+              value: "0"
           containers:
           - name: istio-proxy
           {{- if contains "/" .Values.global.proxy.image }}
@@ -9797,7 +9801,7 @@ data:
         "sts": {
           "servicePort": 0
         },
-        "tag": "1.20.2",
+        "tag": "1.20.3",
         "tracer": {
           "datadog": {},
           "lightstep": {},
@@ -9945,7 +9949,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: spec.nodeName
-          image: docker.io/istio/proxyv2:1.20.2
+          image: docker.io/istio/proxyv2:1.20.3
           name: istio-proxy
           ports:
             - containerPort: 15021
@@ -10139,7 +10143,7 @@ spec:
                   resource: limits.cpu
             - name: PLATFORM
               value: ""
-          image: docker.io/istio/pilot:1.20.2
+          image: docker.io/istio/pilot:1.20.3
           name: discovery
           ports:
             - containerPort: 8080

diff --git a/third_party/istio-latest/istio-ci-no-mesh/istio.yaml b/third_party/istio-latest/istio-ci-no-mesh/istio.yaml
@@ -8494,6 +8494,10 @@ data:
             {{ end }}
           }
         spec:
+          securityContext:
+            sysctls:
+            - name: net.ipv4.ip_unprivileged_port_start
+              value: "0"
           containers:
           - name: istio-proxy
           {{- if contains "/" .Values.global.proxy.image }}
@@ -9797,7 +9801,7 @@ data:
         "sts": {
           "servicePort": 0
         },
-        "tag": "1.20.2",
+        "tag": "1.20.3",
         "tracer": {
           "datadog": {},
           "lightstep": {},
@@ -9945,7 +9949,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: spec.nodeName
-          image: docker.io/istio/proxyv2:1.20.2
+          image: docker.io/istio/proxyv2:1.20.3
           name: istio-proxy
           ports:
             - containerPort: 15021
@@ -10139,7 +10143,7 @@ spec:
                   resource: limits.cpu
             - name: PLATFORM
               value: ""
-          image: docker.io/istio/pilot:1.20.2
+          image: docker.io/istio/pilot:1.20.3
           name: discovery
           ports:
             - containerPort: 8080

diff --git a/third_party/istio-latest/istio-kind-ambient/istio.yaml b/third_party/istio-latest/istio-kind-ambient/istio.yaml
@@ -8673,6 +8673,10 @@ data:
             {{ end }}
           }
         spec:
+          securityContext:
+            sysctls:
+            - name: net.ipv4.ip_unprivileged_port_start
+              value: "0"
           containers:
           - name: istio-proxy
           {{- if contains "/" .Values.global.proxy.image }}
@@ -9976,7 +9980,7 @@ data:
         "sts": {
           "servicePort": 0
         },
-        "tag": "1.20.2",
+        "tag": "1.20.3",
         "tracer": {
           "datadog": {},
           "lightstep": {},
@@ -10126,7 +10130,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: spec.nodeName
-          image: docker.io/istio/proxyv2:1.20.2
+          image: docker.io/istio/proxyv2:1.20.3
           name: istio-proxy
           ports:
             - containerPort: 15021
@@ -10330,7 +10334,7 @@ spec:
                   resource: limits.cpu
             - name: PLATFORM
               value: ""
-          image: docker.io/istio/pilot:1.20.2-distroless
+          image: docker.io/istio/pilot:1.20.3-distroless
           name: discovery
           ports:
             - containerPort: 8080
@@ -10810,7 +10814,7 @@ spec:
               valueFrom:
                 resourceFieldRef:
                   resource: limits.cpu
-          image: docker.io/istio/install-cni:1.20.2
+          image: docker.io/istio/install-cni:1.20.3
           name: install-cni
           readinessProbe:
             httpGet:
@@ -10926,7 +10930,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: spec.serviceAccountName
-          image: docker.io/istio/ztunnel:1.20.2-distroless
+          image: docker.io/istio/ztunnel:1.20.3-distroless
           name: istio-proxy
           ports:
             - containerPort: 15020

diff --git a/third_party/istio-latest/istio-kind-no-mesh/istio.yaml b/third_party/istio-latest/istio-kind-no-mesh/istio.yaml
@@ -8494,6 +8494,10 @@ data:
             {{ end }}
           }
         spec:
+          securityContext:
+            sysctls:
+            - name: net.ipv4.ip_unprivileged_port_start
+              value: "0"
           containers:
           - name: istio-proxy
           {{- if contains "/" .Values.global.proxy.image }}
@@ -9797,7 +9801,7 @@ data:
         "sts": {
           "servicePort": 0
         },
-        "tag": "1.20.2",
+        "tag": "1.20.3",
         "tracer": {
           "datadog": {},
           "lightstep": {},
@@ -9945,7 +9949,7 @@ spec:
               valueFrom:
                 fieldRef:
                   fieldPath: spec.nodeName
-          image: docker.io/istio/proxyv2:1.20.2
+          image: docker.io/istio/proxyv2:1.20.3
           name: istio-proxy
           ports:
             - containerPort: 15021
@@ -10139,7 +10143,7 @@ spec:
                   resource: limits.cpu
             - name: PLATFORM
               value: ""
-          image: docker.io/istio/pilot:1.20.2
+          image: docker.io/istio/pilot:1.20.3
           name: discovery
           ports:
             - containerPort: 8080