Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

implement cluster-local-domain-tls in serving #14610

Merged
merged 10 commits into from
Jan 25, 2024
Merged

implement cluster-local-domain-tls in serving #14610

Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
2dd28cc
use Knative certificates for Serving encryption
ReToCode Nov 7, 2023
c2a9fe3
Make namespace the owner of the Queue-Proxy certificate
ReToCode Nov 30, 2023
d668b09
Lint error fixes
ReToCode Nov 30, 2023
e14f43c
Minor fixes
ReToCode Dec 7, 2023
83f14bb
cherry-pick https://github.com/knative/serving/pull/14706
ReToCode Dec 7, 2023
4415397
keep existing secret in upgrade/downgrade tests
ReToCode Dec 19, 2023
584fb6c
Rebase and update to upstream/main
ReToCode Jan 11, 2024
a6c363f
Review improvements
ReToCode Jan 16, 2024
67cf527
Update net-istio
ReToCode Jan 16, 2024
e04287b
Use a revision tracker to reconcile on KCerts
ReToCode Jan 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update net-istio
  • Loading branch information
@ReToCode
ReToCode committed Jan 16, 2024
commit 67cf5278985cbf243e20b1d15db16f6d78ce535c
36 changes: 18 additions & 18 deletions third_party/istio-latest/net-istio.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# Generated when HEAD was 34c78f032e62c97ba0e23f9e0d93fe36775a7935
# Generated when HEAD was 04509ce7e3e23875f97abfcf82c95038e0ec8df4
#
# Copyright 2019 The Knative Authors
#
Expand All @@ -22,7 +22,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
serving.knative.dev/controller: "true"
networking.knative.dev/ingress-provider: istio
rules:
Expand Down Expand Up @@ -54,7 +54,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
spec:
selector:
Expand Down Expand Up @@ -93,7 +93,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
spec:
selector:
Expand All @@ -114,7 +114,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
experimental.istio.io/disable-gateway-port-translation: "true"
spec:
Expand Down Expand Up @@ -149,7 +149,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
data:
# TODO(nghia): Extract the .svc.cluster.local suffix into its own config.
Expand Down Expand Up @@ -203,7 +203,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
spec:
selector:
Expand All @@ -221,7 +221,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
spec:
selector:
Expand Down Expand Up @@ -254,7 +254,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
spec:
selector:
Expand All @@ -271,14 +271,14 @@ spec:
app: net-istio-controller
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
spec:
serviceAccountName: controller
containers:
- name: controller
# This is the Go import path for the binary that is containerized
# and substituted here.
image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/controller@sha256:4dab86aead9b9bead8412be158d179238db84f4b10a0b006589c954f1e98879b
image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/controller@sha256:6a3844ed4e779996c50339f416a57d1ea9189ba1c382303a8d6f370d9d126589
resources:
requests:
cpu: 30m
Expand Down Expand Up @@ -357,7 +357,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
spec:
selector:
Expand All @@ -371,14 +371,14 @@ spec:
role: net-istio-webhook
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
spec:
serviceAccountName: controller
containers:
- name: webhook
# This is the Go import path for the binary that is containerized
# and substituted here.
image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/webhook@sha256:28692c7f7cad36f09758ef4c8d0e0cf098dec3a4b4d03433bc9e905625fdf80f
image: gcr.io/knative-nightly/knative.dev/net-istio/cmd/webhook@sha256:af4a5e38a05fd9682fcc1b3d8f6b68aea803fa7f380f1650805442a37ffd39dc
resources:
requests:
cpu: 20m
Expand Down Expand Up @@ -462,7 +462,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio

---
Expand All @@ -489,7 +489,7 @@ metadata:
role: net-istio-webhook
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
spec:
ports:
Expand Down Expand Up @@ -528,7 +528,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
webhooks:
- admissionReviewVersions:
Expand Down Expand Up @@ -567,7 +567,7 @@ metadata:
labels:
app.kubernetes.io/component: net-istio
app.kubernetes.io/name: knative-serving
app.kubernetes.io/version: "20240111-34c78f03"
app.kubernetes.io/version: "20240115-04509ce7"
networking.knative.dev/ingress-provider: istio
webhooks:
- admissionReviewVersions:
Expand Down
Loading