Skip to content

Conversation

FilipB
Copy link
Collaborator

@FilipB FilipB commented Sep 24, 2025

The test setup was creating two revisions where one was called default. In Istio 1.27 (after istio/istio#56004) it resulted in two conflicting default tags which caused the echo workloads to be injected by incorrect control plane (gateway) which fails as it's not using CNI.

TAG REVISION NAMESPACES
default default
default gateway

istio-revision-tag-default-gateway... MutatingWebhookConfiguration was created for gateway revision (gateway namespace)
istio-revision-tag-default-mesh... MutatingWebhookConfiguration was created for default revision (mesh namespace)

Having both control planes in one namespace would result only in one default tag as it would be named the same and installation of second control plane would overwrite the existing default tag.

The fix is using proper revision names so there is no conflict.

The test setup was creating two revisions where one was called default.
In Istio 1.27 it resulted in two conflicting default tags which caused
the echo workloads to be injected by incorrect control plane (gateway)
which fails as it's not using CNI.
@openshift-ci openshift-ci bot added the size/XS label Sep 24, 2025
@fjglira
Copy link
Contributor

fjglira commented Sep 24, 2025

/retest

@FilipB
Copy link
Collaborator Author

FilipB commented Sep 24, 2025

The test was passing in release-1.26 because it does not contain a fix for istio/istio#56004. I'm still checking why there are two default tags because the new default tag for default revision should replace the default tag for non-default revision - https://github.com/istio/istio/blob/release-1.27/operator/pkg/webhook/webhook.go#L153

@FilipB
Copy link
Collaborator Author

FilipB commented Sep 25, 2025

/retest

2 similar comments
@FilipB
Copy link
Collaborator Author

FilipB commented Sep 26, 2025

/retest

@FilipB
Copy link
Collaborator Author

FilipB commented Sep 29, 2025

/retest

@FilipB
Copy link
Collaborator Author

FilipB commented Sep 29, 2025

/retest

2 similar comments
@FilipB
Copy link
Collaborator Author

FilipB commented Sep 29, 2025

/retest

@FilipB
Copy link
Collaborator Author

FilipB commented Sep 29, 2025

/retest

@openshift-merge-bot openshift-merge-bot bot merged commit 87def1c into openshift-service-mesh:release-1.27 Sep 29, 2025
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants