Use a production version of Istio (#334)

Signed-off-by: Shmuel Kallner <[email protected]>

Author: shmuelk

deploy/components/crds-istio/istio.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     install.operator.istio.io/owning-resource: unknown
     istio: pilot
     istio.io/rev: llm-d-gateway
@@ -37,8 +37,8 @@ spec:
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: istiod
         app.kubernetes.io/part-of: istio
-        app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-        helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+        app.kubernetes.io/version: 1.27.1
+        helm.sh/chart: istiod-1.27.1
         install.operator.istio.io/owning-resource: unknown
         istio: istiod
         istio.io/dataplane-mode: none
@@ -88,6 +88,7 @@ spec:
         - name: GOMEMLIMIT
           valueFrom:
             resourceFieldRef:
+              divisor: "1"
               resource: limits.memory
         - name: GOMAXPROCS
           valueFrom:
@@ -96,7 +97,9 @@ spec:
               resource: limits.cpu
         - name: PLATFORM
           value: ""
-        image: quay.io/rh-ee-sutt/istio-testing/pilot:1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+        - name: ENABLE_GATEWAY_API_INFERENCE_EXTENSION
+          value: "true"
+        image: docker.io/istio/pilot:1.27.1
         name: discovery
         ports:
         - containerPort: 8080
@@ -182,3 +185,4 @@ spec:
           name: istio-ca-root-cert
           optional: true
         name: istio-csr-ca-configmap
+

deploy/components/istio-control-plane/configmaps.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     install.operator.istio.io/owning-resource: unknown
     istio.io/rev: llm-d-gateway
     operator.istio.io/component: Pilot
@@ -29,3 +29,4 @@ spec:
     apiVersion: apps/v1
     kind: Deployment
     name: istiod-llm-d-gateway
+

deploy/components/istio-control-plane/deployments.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     install.operator.istio.io/owning-resource: unknown
     istio: pilot
     istio.io/rev: llm-d-gateway
@@ -22,3 +22,4 @@ spec:
     matchLabels:
       app: istiod
       istio.io/rev: llm-d-gateway
+

deploy/components/istio-control-plane/hpa.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istio-reader
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     release: istio
   name: istio-reader-clusterrole-llm-d-gateway-llm-d-istio-system
 rules:
@@ -111,6 +111,7 @@ rules:
   - subjectaccessreviews
   verbs:
   - create
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -121,8 +122,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     release: istio
   name: istiod-clusterrole-llm-d-gateway-llm-d-istio-system
 rules:
@@ -275,12 +276,21 @@ rules:
   - create
 - apiGroups:
   - gateway.networking.k8s.io
+  - gateway.networking.x-k8s.io
   resources:
   - '*'
   verbs:
   - get
   - watch
   - list
+- apiGroups:
+  - gateway.networking.x-k8s.io
+  resources:
+  - xbackendtrafficpolicies/status
+  - xlistenersets/status
+  verbs:
+  - update
+  - patch
 - apiGroups:
   - gateway.networking.k8s.io
   resources:
@@ -346,6 +356,7 @@ rules:
   - get
   - watch
   - list
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRole
@@ -356,8 +367,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     release: istio
   name: istiod-gateway-controller-llm-d-gateway-llm-d-istio-system
 rules:
@@ -373,6 +384,30 @@ rules:
   - patch
   - create
   - delete
+- apiGroups:
+  - autoscaling
+  resources:
+  - horizontalpodautoscalers
+  verbs:
+  - get
+  - watch
+  - list
+  - update
+  - patch
+  - create
+  - delete
+- apiGroups:
+  - policy
+  resources:
+  - poddisruptionbudgets
+  verbs:
+  - get
+  - watch
+  - list
+  - update
+  - patch
+  - create
+  - delete
 - apiGroups:
   - ""
   resources:
@@ -397,6 +432,7 @@ rules:
   - patch
   - create
   - delete
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -407,8 +443,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istio-reader
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     release: istio
   name: istio-reader-clusterrole-llm-d-gateway-llm-d-istio-system
 roleRef:
@@ -419,6 +455,7 @@ subjects:
 - kind: ServiceAccount
   name: istio-reader-service-account
   namespace: llm-d-istio-system
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -429,8 +466,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     release: istio
   name: istiod-clusterrole-llm-d-gateway-llm-d-istio-system
 roleRef:
@@ -441,6 +478,7 @@ subjects:
 - kind: ServiceAccount
   name: istiod-llm-d-gateway
   namespace: llm-d-istio-system
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -451,8 +489,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     release: istio
   name: istiod-gateway-controller-llm-d-gateway-llm-d-istio-system
 roleRef:
@@ -463,6 +501,7 @@ subjects:
 - kind: ServiceAccount
   name: istiod-llm-d-gateway
   namespace: llm-d-istio-system
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
@@ -473,8 +512,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     release: istio
   name: istiod-llm-d-gateway
   namespace: llm-d-istio-system
@@ -511,6 +550,7 @@ rules:
   - update
   - patch
   - create
+
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
@@ -521,8 +561,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     release: istio
   name: istiod-llm-d-gateway
   namespace: llm-d-istio-system
@@ -534,3 +574,4 @@ subjects:
 - kind: ServiceAccount
   name: istiod-llm-d-gateway
   namespace: llm-d-istio-system
+

deploy/components/istio-control-plane/policies.yaml

@@ -7,11 +7,12 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istio-reader
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: base-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: base-1.27.1
     release: istio
   name: istio-reader-service-account
   namespace: llm-d-istio-system
+
 ---
 apiVersion: v1
 kind: ServiceAccount
@@ -22,8 +23,9 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     release: istio
   name: istiod-llm-d-gateway
   namespace: llm-d-istio-system
+

deploy/components/istio-control-plane/rbac.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istiod
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
-    helm.sh/chart: istiod-1.26-alpha.9befed2f1439d883120f8de70fd70d84ca0ebc3d
+    app.kubernetes.io/version: 1.27.1
+    helm.sh/chart: istiod-1.27.1
     install.operator.istio.io/owning-resource: unknown
     istio: pilot
     istio.io/rev: llm-d-gateway
@@ -34,3 +34,4 @@ spec:
   selector:
     app: istiod
     istio.io/rev: llm-d-gateway
+