Bump Istio to 1.22.3 and update version (#958)

* Update Istio version to 1.22.3 (#945) * Update istio version to 1.22.3 * Update README.md * RN + go mod * Update docs/release-notes/1.9.0.md Co-authored-by: Tim Riffer <[email protected]> --------- Co-authored-by: Tim Riffer <[email protected]> * RN and version * Update 1.8.2.md --------- Co-authored-by: Tim Riffer <[email protected]>
kyma-project · Jul 31, 2024 · 67022ca · 67022ca
1 parent 17e2934
commit 67022ca
Show file tree

Hide file tree

Showing 10 changed files with 30 additions and 23 deletions.
diff --git a/README.md b/README.md
@@ -13,9 +13,9 @@ Kyma Istio Operator is a component of the Kyma runtime that handles the manageme
 
 The latest release includes the following versions of Istio and Envoy:
 
-**Istio version:** 1.22.2
+**Istio version:** 1.22.3
 
-**Envoy version:** 1.30.3
+**Envoy version:** 1.30.5
 
 > [!NOTE]
 > If you want to enable compatibility with the previous minor version of Istio, see [Compatibility Mode](https://kyma-project.io/#/istio/user/00-10-overview-istio-controller?id=compatibility-mode).

diff --git a/VERSION b/VERSION
@@ -1 +1 @@
-1.8.1
+1.8.2
diff --git a/docs/release-notes/1.8.2.md b/docs/release-notes/1.8.2.md
@@ -0,0 +1,3 @@
+## New Features
+
+- Update the Istio version to 1.22.3 [#958](https://github.com/kyma-project/istio/pull/958). Read [Istio 1.22.3 Release Announcement](https://istio.io/latest/news/releases/1.22.x/announcing-1.22.3/).
diff --git a/docs/release-notes/1.9.0.md b/docs/release-notes/1.9.0.md
@@ -0,0 +1,4 @@
+## New Features
+
+- During the Istio upgrade, Pods with the Istio sidecar proxies will now be divided into smaller groups and restarted in multiple reconciliations instead of all at once. This will increase the stability and reliability of the reconciliation for the Istio module's operator. See the [issue #155](https://github.com/kyma-project/istio/issues/155).
+- Update the Istio version to 1.22.3 [#945](https://github.com/kyma-project/istio/pull/945). Read [Istio 1.22.3 Release Announcement](https://istio.io/latest/news/releases/1.22.x/announcing-1.22.3/).
diff --git a/docs/user/README.md b/docs/user/README.md
@@ -10,9 +10,9 @@ Kyma Istio Operator is an essential part of the Istio module that handles the ma
 
 The latest release includes the following versions of Istio and Envoy:  
 
-**Istio version:** 1.22.2
+**Istio version:** 1.22.3
 
-**Envoy version:** 1.30.3
+**Envoy version:** 1.30.5
 
 > [!NOTE]
 > If you want to enable compatibility with the previous minor version of Istio, see [Compatibility Mode](https://kyma-project.io/#/istio/user/00-10-overview-istio-controller?id=compatibility-mode).

diff --git a/go.mod b/go.mod
@@ -24,15 +24,15 @@ require (
 	golang.org/x/time v0.5.0
 	google.golang.org/protobuf v1.34.2
 	gopkg.in/yaml.v3 v3.0.1
-	istio.io/api v1.22.2-0.20240619002433-8214ad1c7bd7
-	istio.io/client-go v1.22.2-0.20240619002733-a3ff9edd813c
-	istio.io/istio v0.0.0-20240626183513-204da5ba47f2
+	istio.io/api v1.22.3
+	istio.io/client-go v1.22.3
+	istio.io/istio v0.0.0-20240703124446-b880f7040530
 	k8s.io/api v0.30.3
 	k8s.io/apiextensions-apiserver v0.30.3
 	k8s.io/apimachinery v0.30.3
 	k8s.io/client-go v0.30.3
 	k8s.io/kubectl v0.30.3
-	k8s.io/utils v0.0.0-20240711033017-18e509b52bc8
+	k8s.io/utils v0.0.0-20240423183400-0849a56e8f22
 	sigs.k8s.io/controller-runtime v0.18.0 // Since we are using the Istio library directly, we should also use the controller-runtime version that is used by Istio.
 	sigs.k8s.io/yaml v1.4.0
 )

diff --git a/go.sum b/go.sum
@@ -960,12 +960,12 @@ helm.sh/helm/v3 v3.14.3/go.mod h1:v6myVbyseSBJTzhmeE39UcPLNv6cQK6qss3dvgAySaE=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
-istio.io/api v1.22.2-0.20240619002433-8214ad1c7bd7 h1:iSnlKJkc4UREFpBnaJLnZv2dtpg5DXUbk0BqTXpa3n0=
-istio.io/api v1.22.2-0.20240619002433-8214ad1c7bd7/go.mod h1:S3l8LWqNYS9yT+d4bH+jqzH2lMencPkW7SKM1Cu9EyM=
-istio.io/client-go v1.22.2-0.20240619002733-a3ff9edd813c h1:vdJOAEER1vXo9uf2VGjIkgAaFTLgvwtvefmU4LXaT30=
-istio.io/client-go v1.22.2-0.20240619002733-a3ff9edd813c/go.mod h1:Fxt0tVZLXQRKyrBv7uwm4zCZE0qayejG0bSwZy9K6Hg=
-istio.io/istio v0.0.0-20240626183513-204da5ba47f2 h1:p8t/ftDPtv1exF7G4Ec8cshs0n5ImdVYJet7/NtgCV4=
-istio.io/istio v0.0.0-20240626183513-204da5ba47f2/go.mod h1:W+Q7BRfeI4wvPiXo7cmG4c8LkROOpi9E5aupfGd8GT4=
+istio.io/api v1.22.3 h1:V59wgcCm2fK2r137QBsddCDHNg0efg/DauIWEB9DFz8=
+istio.io/api v1.22.3/go.mod h1:S3l8LWqNYS9yT+d4bH+jqzH2lMencPkW7SKM1Cu9EyM=
+istio.io/client-go v1.22.3 h1:4WocGQYVTASpfn7tj1yGE8f0sgxzbxOkg56HX1LJQ5U=
+istio.io/client-go v1.22.3/go.mod h1:D/vNne1n5586423NgGXMnPgshE/99mQgnjnxK/Vw2yM=
+istio.io/istio v0.0.0-20240703124446-b880f7040530 h1:7Hw+gFj0S1PxJFcCEzJX1QYszLHoNcriw7mtZAXTXBU=
+istio.io/istio v0.0.0-20240703124446-b880f7040530/go.mod h1:SUACpPO3/iqxIDDMTPbngKB6gv7ht90iMBa6ddfq9qw=
 k8s.io/api v0.18.2/go.mod h1:SJCWI7OLzhZSvbY7U8zwNl9UA4o1fizoug34OV/2r78=
 k8s.io/api v0.18.4/go.mod h1:lOIQAKYgai1+vz9J7YcDZwC26Z0zQewYOGWdyIPUUQ4=
 k8s.io/api v0.30.3 h1:ImHwK9DCsPA9uoU3rVh4QHAHHK5dTSv1nxJUapx8hoQ=
@@ -1010,8 +1010,8 @@ k8s.io/kubectl v0.30.3 h1:YIBBvMdTW0xcDpmrOBzcpUVsn+zOgjMYIu7kAq+yqiI=
 k8s.io/kubectl v0.30.3/go.mod h1:IcR0I9RN2+zzTRUa1BzZCm4oM0NLOawE6RzlDvd1Fpo=
 k8s.io/utils v0.0.0-20200324210504-a9aa75ae1b89/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
 k8s.io/utils v0.0.0-20200603063816-c1c6865ac451/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
-k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 h1:pUdcCO1Lk/tbT5ztQWOBi5HBgbBP1J8+AsQnQCKsi8A=
-k8s.io/utils v0.0.0-20240711033017-18e509b52bc8/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
+k8s.io/utils v0.0.0-20240423183400-0849a56e8f22 h1:ao5hUqGhsqdm+bYbjH/pRkCs0unBGe9UyDahzs9zQzQ=
+k8s.io/utils v0.0.0-20240423183400-0849a56e8f22/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.0.7/go.mod h1:PHgbrJT7lCHcxMU+mDHEm+nx46H4zuuHZkDP6icnhu0=
 sigs.k8s.io/controller-runtime v0.6.1/go.mod h1:XRYBPdbf5XJu9kpS84VJiZ7h/u1hF3gEORz0efEja7A=
 sigs.k8s.io/controller-runtime v0.18.0 h1:Z7jKuX784TQSUL1TIyeuF7j8KXZ4RtSX0YgtjKcSTME=

diff --git a/internal/istiooperator/istio-operator-light.yaml b/internal/istiooperator/istio-operator-light.yaml
@@ -7,7 +7,7 @@ metadata:
     kyma-project.io/module: istio
 spec:
   hub: europe-docker.pkg.dev/kyma-project/prod/external/istio
-  tag: "1.22.2-distroless"
+  tag: "1.22.3-distroless"
   components:
     base:
       enabled: true

diff --git a/internal/istiooperator/istio-operator.yaml b/internal/istiooperator/istio-operator.yaml
@@ -7,7 +7,7 @@ metadata:
     kyma-project.io/module: istio
 spec:
   hub: europe-docker.pkg.dev/kyma-project/prod/external/istio
-  tag: "1.22.2-distroless"
+  tag: "1.22.3-distroless"
   components:
     base:
       enabled: true

diff --git a/sec-scanners-config.yaml b/sec-scanners-config.yaml
@@ -1,9 +1,9 @@
 module-name: istio
 protecode:
-  - europe-docker.pkg.dev/kyma-project/prod/istio-manager:1.8.1
-  - europe-docker.pkg.dev/kyma-project/prod/external/istio/install-cni:1.22.2-distroless
-  - europe-docker.pkg.dev/kyma-project/prod/external/istio/proxyv2:1.22.2-distroless
-  - europe-docker.pkg.dev/kyma-project/prod/external/istio/pilot:1.22.2-distroless
+  - europe-docker.pkg.dev/kyma-project/prod/istio-manager:1.8.2
+  - europe-docker.pkg.dev/kyma-project/prod/external/istio/install-cni:1.22.3-distroless
+  - europe-docker.pkg.dev/kyma-project/prod/external/istio/proxyv2:1.22.3-distroless
+  - europe-docker.pkg.dev/kyma-project/prod/external/istio/pilot:1.22.3-distroless
 whitesource:
   language: golang-mod
   subprojects: false