starlingx/app-istio
Code Issues Proposed changes

Up-version: Istio to 1.26.2 and Kiali to 2.11.0

Browse Source 
This commit up-versions the Istio helm charts to v1.26.2
and Kiali helm charts to v2.11.0.
Istio v1.26.2 and Kiali v2.11.0 are compatible with
each other as per support matrix.

Updated patch file of Kiali because of a template change in
upstream chart.

Test Plan:

PASS: Build the Istio application and manually verify Istio
      and Kiali packages are created successfully.
PASS: Test Updated Istio application on Kubernetes version
      1.29.2 and 1.32.2
PASS: Upload the Istio package using system command and
      verify the upload status of the Istio package.
PASS: App Lifecycle tests with this version of Istio and Kiali-
      Application Upload, Apply, Update, Downgrade, Remove
      and Delete.
PASS: Verify "helm ls -n istio-system" has all necessary charts.
      - base
      - cni
      - istiod
      - ingress
      - egress
      - kiali-server
      with new versions.

Story: 2011403
Task: 52593

Change-Id: I276bb3527a19260482d0e1565515a478caca29cb
Signed-off-by: Aman Pandae <AmanPandae.Mothukuri@windriver.com>
This commit is contained in:
Aman Pandae
2025-07-14 16:09:25 -04:00
parent 8aa1135894
commit 93cb03c5c4
21 changed files with 151 additions and 138 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
helm-charts/upstream/istio-base-helm/debian/deb_folder/changelog
View File

@@ -1,3 +1,9 @@
istio-base-helm (1.26-2) unstable; urgency=medium
* Update Istio base chart version
-- Aman Pandae <amanpandae.mothukuri@windriver.com> Mon, 15 Jul 2025 06:42:17 +0000
istio-base-helm (1.22-1) unstable; urgency=medium
* Initial Release, removing dependency on Istio Operator

1
helm-charts/upstream/istio-base-helm/debian/deb_folder/rules
View File

@@ -20,7 +20,6 @@ override_dh_auto_build:
cp Chart.yaml istio-base
cp values.yaml istio-base
cp -r templates istio-base
cp -r crds istio-base
cp -r files istio-base
# Create the tar file for the chart

8
helm-charts/upstream/istio-base-helm/debian/meta_data.yaml
View File

@@ -1,10 +1,10 @@
---
debname: istio-base-helm
debver: 1.22-1
debver: 1.26-2
dl_path:
name: helm-charts-istio-base-1.22.1.tar.gz
url: https://storage.googleapis.com/istio-release/releases/1.22.1/helm/base-1.22.1.tgz
sha256sum: ca4f2267f3e63b77a5813f40531f67cbda8232ed1406730a876af2b05c97d8b3
name: helm-charts-istio-base-1.26.2.tar.gz
url: https://storage.googleapis.com/istio-release/releases/1.26.2/helm/base-1.26.2.tgz
sha256sum: 1e900b0aefe0af2015aa0dcbba7b84333f50cd1a7e8330e09f3c93e6e38a5d6c
src_files:
- files/Makefile
revision:

6
helm-charts/upstream/istio-cni-helm/debian/deb_folder/changelog
View File

@@ -1,3 +1,9 @@
istio-cni-helm (1.26-2) unstable; urgency=medium
* Update Istio CNI chart version
-- Aman Pandae <amanpandae.mothukuri@windriver.com> Mon, 15 Jul 2025 06:42:17 +0000
istio-cni-helm (1.22-1) unstable; urgency=medium
* Initial Release, removing dependency on Istio Operator

8
helm-charts/upstream/istio-cni-helm/debian/meta_data.yaml
View File

@@ -1,10 +1,10 @@
---
debname: istio-cni-helm
debver: 1.22-1
debver: 1.26-2
dl_path:
name: helm-charts-istio-cni-1.22.1.tar.gz
url: https://storage.googleapis.com/istio-release/releases/1.22.1/helm/cni-1.22.1.tgz
sha256sum: 459a44c3fc1e97bb82c4cb409e0a7257963043deb3d50fb3ecbcf5a2e652da0b
name: helm-charts-istio-cni-1.26.2.tar.gz
url: https://storage.googleapis.com/istio-release/releases/1.26.2/helm/cni-1.26.2.tgz
sha256sum: 6f93f68a184644cf0ae708de3d8d0a1907396638cc5bf4781e93de34d69bbe68
src_files:
- files/Makefile
revision:

6
helm-charts/upstream/istio-egressgateway-helm/debian/deb_folder/changelog
View File

@@ -1,3 +1,9 @@
istio-egressgateway-helm (1.26-2) unstable; urgency=medium
* Update Istio Egressgateway chart version
-- Aman Pandae <amanpandae.mothukuri@windriver.com> Mon, 15 Jul 2025 06:42:17 +0000
istio-egressgateway-helm (1.22-1) unstable; urgency=medium
* Initial Release, removing dependency on Istio Operator

8
helm-charts/upstream/istio-egressgateway-helm/debian/meta_data.yaml
View File

@@ -1,10 +1,10 @@
---
debname: istio-egressgateway-helm
debver: 1.22-1
debver: 1.26-2
dl_path:
name: helm-charts-istio-egressgateway-1.22.1.tar.gz
url: https://github.com/istio/istio/archive/refs/tags/1.22.1.tar.gz
sha256sum: 053e121a56aac7a75fbbfcab3332efe1b1577385b7b2e17f94d857f6bacbee29
name: helm-charts-istio-egressgateway-1.26.2.tar.gz
url: https://github.com/istio/istio/archive/refs/tags/1.26.2.tar.gz
sha256sum: fb3b3569165e8b1cf01c676b7ce9a903abf730446df7e2753f436072aefbfd5e
src_files:
- files/Makefile
revision:

6
helm-charts/upstream/istio-ingressgateway-helm/debian/deb_folder/changelog
View File

@@ -1,3 +1,9 @@
istio-ingressgateway-helm (1.26-2) unstable; urgency=medium
* Update Istio Ingressgateway chart version
-- Aman Pandae <amanpandae.mothukuri@windriver.com> Mon, 15 Jul 2025 06:42:17 +0000
istio-ingressgateway-helm (1.22-1) unstable; urgency=medium
* Initial Release, removing dependency on Istio Operator

8
helm-charts/upstream/istio-ingressgateway-helm/debian/meta_data.yaml
View File

@@ -1,10 +1,10 @@
---
debname: istio-ingressgateway-helm
debver: 1.22-1
debver: 1.26-2
dl_path:
name: helm-charts-istio-ingressgateway-1.22.1.tar.gz
url: https://github.com/istio/istio/archive/refs/tags/1.22.1.tar.gz
sha256sum: 053e121a56aac7a75fbbfcab3332efe1b1577385b7b2e17f94d857f6bacbee29
name: helm-charts-istio-ingressgateway-1.26.2.tar.gz
url: https://github.com/istio/istio/archive/refs/tags/1.26.2.tar.gz
sha256sum: fb3b3569165e8b1cf01c676b7ce9a903abf730446df7e2753f436072aefbfd5e
src_files:
- files/Makefile
revision:

6
helm-charts/upstream/istio-pilot-helm/debian/deb_folder/changelog
View File

@@ -1,3 +1,9 @@
istio-pilot-helm (1.26-2) unstable; urgency=medium
* Update Istio Pilot chart version
-- Aman Pandae <amanpandae.mothukuri@windriver.com> Mon, 15 Jul 2025 06:42:17 +0000
istio-pilot-helm (1.22-1) unstable; urgency=medium
* Initial Release, removing dependency on Istio Operator

8
helm-charts/upstream/istio-pilot-helm/debian/meta_data.yaml
View File

@@ -1,10 +1,10 @@
---
debname: istio-pilot-helm
debver: 1.22-1
debver: 1.26-2
dl_path:
name: helm-charts-istio-pilot-1.22.1.tar.gz
url: https://storage.googleapis.com/istio-release/releases/1.22.1/helm/istiod-1.22.1.tgz
sha256sum: 171356f34144995ca913a0f07f4f86dd54026fca6236164cb92b56361a77ce49
name: helm-charts-istio-pilot-1.26.2.tar.gz
url: https://storage.googleapis.com/istio-release/releases/1.26.2/helm/istiod-1.26.2.tgz
sha256sum: 183a5508c0bb997f67194e5ee15f4b1c1b1b56a6318a1b7315fa1c74d4d13a8c
src_files:
- files/Makefile
revision:

6
helm-charts/upstream/kiali-helm/debian/deb_folder/changelog
View File

@@ -1,3 +1,9 @@
kiali-helm (2.11-1) unstable; urgency=medium
* Update kiali chart version
-- Aman Pandae <amanpandae.mothukuri@windriver.com> Mon, 15 Jul 2025 06:42:17 +0000
kiali-helm (1.85-1) unstable; urgency=medium
* Update liveliness and readiness probe

83
helm-charts/upstream/kiali-helm/debian/deb_folder/patches/0001-liveness-and-readiness-probe-update.patch
View File

@@ -1,83 +0,0 @@
From 8b27e3ef12e131c9c8f413f0faae3d563fcbc650 Mon Sep 17 00:00:00 2001
From: Md Irshad Sheikh <mdirshad.sheikh@windriver.com>
Date: Tue, 3 Sep 2024 10:03:39 -0400
Subject: [PATCH] liveness-and-readiness-probe-update
---
kiali-server/templates/deployment.yaml | 14 ++++++++++----
kiali-server/values.yaml | 12 ++++++++++++
2 files changed, 22 insertions(+), 4 deletions(-)
diff --git a/kiali-server/templates/deployment.yaml b/kiali-server/templates/deployment.yaml
index 172dbcd..e8a2b9c 100644
--- a/kiali-server/templates/deployment.yaml
+++ b/kiali-server/templates/deployment.yaml
@@ -89,6 +89,7 @@ spec:
containerPort: {{ .Values.server.observability.metrics.port | default 9090 }}
{{- end }}
readinessProbe:
+ failureThreshold: {{ .Values.deployment.readinessProbe.failureThreshold }}
httpGet:
path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz
port: api-port
@@ -97,9 +98,12 @@ spec:
{{- else }}
scheme: HTTP
{{- end }}
- initialDelaySeconds: 5
- periodSeconds: 30
+ initialDelaySeconds: {{ .Values.deployment.readinessProbe.initialDelaySeconds }}
+ periodSeconds: {{ .Values.deployment.readinessProbe.periodSeconds }}
+ successThreshold: {{ .Values.deployment.readinessProbe.successThreshold }}
+ timeoutSeconds: {{ .Values.deployment.readinessProbe.timeoutSeconds }}
livenessProbe:
+ failureThreshold: {{ .Values.deployment.livenessProbe.failureThreshold }}
httpGet:
path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz
port: api-port
@@ -108,8 +112,10 @@ spec:
{{- else }}
scheme: HTTP
{{- end }}
- initialDelaySeconds: 5
- periodSeconds: 30
+ initialDelaySeconds: {{ .Values.deployment.livenessProbe.initialDelaySeconds }}
+ periodSeconds: {{ .Values.deployment.livenessProbe.periodSeconds }}
+ successThreshold: {{ .Values.deployment.livenessProbe.successThreshold }}
+ timeoutSeconds: {{ .Values.deployment.livenessProbe.timeoutSeconds }}
env:
- name: ACTIVE_NAMESPACE
valueFrom:
diff --git a/kiali-server/values.yaml b/kiali-server/values.yaml
index 51de0f5..6e68ff0 100644
--- a/kiali-server/values.yaml
+++ b/kiali-server/values.yaml
@@ -67,6 +67,12 @@ deployment:
override_yaml:
metadata: {}
instance_name: "kiali"
+ livenessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 30
+ successThreshold: 1
+ timeoutSeconds: 5
logger:
log_format: "text"
log_level: "info"
@@ -76,6 +82,12 @@ deployment:
pod_annotations: {}
pod_labels: {}
priority_class_name: ""
+ readinessProbe:
+ failureThreshold: 3
+ initialDelaySeconds: 5
+ periodSeconds: 30
+ successThreshold: 1
+ timeoutSeconds: 5
replicas: 1
resources:
requests:
--
2.25.1

63
helm-charts/upstream/kiali-helm/debian/deb_folder/patches/0001-liveness-and-readiness-probes-update.patch Normal file
View File

@@ -0,0 +1,63 @@
From 896a4f5483a5d4078acb2d4d5b771a4cc6a807e2 Mon Sep 17 00:00:00 2001
From: Aman Pandae <AmanPandae.Mothukuri@windriver.com>
Date: Fri, 8 Aug 2025 00:10:47 -0400
Subject: [PATCH] liveness-and-readiness-probes-update
---
kiali-server/templates/deployment.yaml | 6 ++++++
kiali-server/values.yaml | 6 ++++++
2 files changed, 12 insertions(+)
diff --git a/kiali-server/templates/deployment.yaml b/kiali-server/templates/deployment.yaml
index 9fc3d3b..81bcedc 100644
--- a/kiali-server/templates/deployment.yaml
+++ b/kiali-server/templates/deployment.yaml
@@ -101,8 +101,11 @@ spec:
{{- else }}
scheme: HTTP
{{- end }}
+ failureThreshold: {{ .Values.deployment.probes.readiness.failure_threshold | int | default 3 }}
initialDelaySeconds: {{ .Values.deployment.probes.readiness.initial_delay_seconds | int | default 5 }}
periodSeconds: {{ .Values.deployment.probes.readiness.period_seconds | int | default 30 }}
+ successThreshold: {{ .Values.deployment.probes.readiness.success_threshold | int | default 1 }}
+ timeoutSeconds: {{ .Values.deployment.probes.readiness.timeout_seconds | int | default 5 }}
livenessProbe:
httpGet:
path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz
@@ -112,8 +115,11 @@ spec:
{{- else }}
scheme: HTTP
{{- end }}
+ failureThreshold: {{ .Values.deployment.probes.liveness.failure_threshold | int | default 3 }}
initialDelaySeconds: {{ .Values.deployment.probes.liveness.initial_delay_seconds | int | default 5 }}
periodSeconds: {{ .Values.deployment.probes.liveness.period_seconds | int | default 30 }}
+ successThreshold: {{ .Values.deployment.probes.liveness.success_threshold | int | default 1 }}
+ timeoutSeconds: {{ .Values.deployment.probes.liveness.timeout_seconds | int | default 5 }}
startupProbe:
httpGet:
path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz
diff --git a/kiali-server/values.yaml b/kiali-server/values.yaml
index 3c06887..606ef9c 100644
--- a/kiali-server/values.yaml
+++ b/kiali-server/values.yaml
@@ -73,11 +73,17 @@ deployment:
priority_class_name: ""
probes:
liveness:
+ failure_threshold: 3
initial_delay_seconds: 5
period_seconds: 30
+ success_threshold: 1
+ timeout_seconds: 5
readiness:
+ failure_threshold: 3
initial_delay_seconds: 5
period_seconds: 30
+ success_threshold: 1
+ timeout_seconds: 5
startup:
failure_threshold: 6
initial_delay_seconds: 30
--
2.34.1

2
helm-charts/upstream/kiali-helm/debian/deb_folder/patches/series
View File

@@ -1 +1 @@
0001-liveness-and-readiness-probe-update.patch
0001-liveness-and-readiness-probes-update.patch

8
helm-charts/upstream/kiali-helm/debian/meta_data.yaml
View File

@@ -1,10 +1,10 @@
---
debname: kiali-helm
debver: 1.85-1
debver: 2.11-1
dl_path:
name: helm-charts-kiali-1.85.0.tar.gz
url: https://github.com/kiali/helm-charts/archive/refs/tags/v1.85.0.tar.gz
sha256sum: 46ccb22c23fb74aa62c3c0fd2788e467c7c9d0fdf50cc5c9a36f07146bda7c16
name: helm-charts-kiali-2.11.0.tar.gz
url: https://github.com/kiali/helm-charts/archive/refs/tags/v2.11.0.tar.gz
sha256sum: 7ccd6db318de208afef5534e97232267be7c9752d71ae71ea752900b9d6e3b16
revision:
dist: $STX_DIST
stx_patch: 0

6
stx-istio-helm/stx-istio-helm/fluxcd-manifests/istio-cni/istio-cni-static-overrides.yaml
View File

@@ -17,7 +17,7 @@ cni:
- kube-system
- istio-operator
- istio-system
image: registry.local:9001/docker.io/istio/install-cni:1.22.1
image: docker.io/istio/install-cni:1.26.2
k8s:
readinessProbe:
failureThreshold: 30
@@ -29,6 +29,6 @@ global:
imagePullSecrets:
- default-registry-key
proxy:
image: registry.local:9001/docker.io/istio/proxyv2:1.22.1
image: docker.io/istio/proxyv2:1.26.2
proxy_init:
image: registry.local:9001/docker.io/istio/proxyv2:1.22.1
image: docker.io/istio/proxyv2:1.26.2

4
stx-istio-helm/stx-istio-helm/fluxcd-manifests/istio-egressgateway/istio-egressgateway-static-overrides.yaml
View File

@@ -18,6 +18,6 @@ global:
imagePullSecrets:
- default-registry-key
proxy:
image: registry.local:9001/docker.io/istio/proxyv2:1.22.1
image: docker.io/istio/proxyv2:1.26.2
proxy_init:
image: registry.local:9001/docker.io/istio/proxyv2:1.22.1
image: docker.io/istio/proxyv2:1.26.2

4
stx-istio-helm/stx-istio-helm/fluxcd-manifests/istio-ingressgateway/istio-ingressgateway-static-overrides.yaml
View File

@@ -21,6 +21,6 @@ global:
imagePullSecrets:
- default-registry-key
proxy:
image: registry.local:9001/docker.io/istio/proxyv2:1.22.1
image: docker.io/istio/proxyv2:1.26.2
proxy_init:
image: registry.local:9001/docker.io/istio/proxyv2:1.22.1
image: docker.io/istio/proxyv2:1.26.2

6
stx-istio-helm/stx-istio-helm/fluxcd-manifests/istio-pilot/istio-pilot-static-overrides.yaml
View File

@@ -6,7 +6,7 @@
pilot:
enabled: true
image: registry.local:9001/docker.io/istio/pilot:1.22.1
image: docker.io/istio/pilot:1.26.2
cni:
enabled: true
k8s:
@@ -24,6 +24,6 @@ global:
imagePullSecrets:
- default-registry-key
proxy:
image: registry.local:9001/docker.io/istio/proxyv2:1.22.1
image: docker.io/istio/proxyv2:1.26.2
proxy_init:
image: registry.local:9001/docker.io/istio/proxyv2:1.22.1
image: docker.io/istio/proxyv2:1.26.2

36
stx-istio-helm/stx-istio-helm/fluxcd-manifests/kiali-server/kiali-server-static-overrides.yaml
View File

@@ -1,29 +1,27 @@
#
# Copyright (c) 2024 Wind River Systems, Inc.
# Copyright (c) 2024,2025 Wind River Systems, Inc.
#
# SPDX-License-Identifier: Apache-2.0
#
replicaCount: 1
namespace: istio-system
images:
tags:
kiali: quay.io/kiali/kiali:v1.85.0
deployment:
image_name: registry.local:9001/quay.io/kiali/kiali
image_name: quay.io/kiali/kiali
image_pull_secrets: ["default-registry-key"]
image_version: v1.85.0
version_label: v1.85.0
image_version: v2.11.0
version_label: v2.11.0
service_type: NodePort
livenessProbe:
failureThreshold: 3
initialDelaySeconds: 5
periodSeconds: 30
successThreshold: 1
timeoutSeconds: 5
readinessProbe:
failureThreshold: 3
initialDelaySeconds: 5
periodSeconds: 30
successThreshold: 1
timeoutSeconds: 5
probes:
liveness:
failure_threshold: 3
initial_delay_seconds: 5
period_seconds: 30
success_threshold: 1
timeout_seconds: 5
readiness:
failure_threshold: 3
initial_delay_seconds: 5
period_seconds: 30
success_threshold: 1
timeout_seconds: 5