Istio 1.22.1 (#2750)

* Upgrade istio to v.1.22.1

Signed-off-by: juliusvonkohout <45896133+juliusvonkohout@users.noreply.github.com>

* Upgrade istio-cni to v.1.22.1

Signed-off-by: juliusvonkohout <45896133+juliusvonkohout@users.noreply.github.com>

---------

Signed-off-by: juliusvonkohout <45896133+juliusvonkohout@users.noreply.github.com>

.github/workflows/kserve_cni_test.yaml

@@ -6,7 +6,7 @@ on:
       - tests/gh-actions/kind-cluster.yaml
       - tests/gh-actions/install_kind.sh
       - tests/gh-actions/install_kustomize.sh
-      - common/istio-cni-1-21/**
+      - common/istio-cni-1-22/**
       - tests/gh-actions/install_cert_manager.sh
       - common/cert-manager/**
       - tests/gh-actions/install_knative-cni.sh

.github/workflows/notebook_controller_m2m_test.yaml

@@ -38,7 +38,7 @@ jobs:
       run: ./tests/gh-actions/install_istio_with_ext_auth.sh*
 
     - name: Install kubeflow-istio-resources
-      run: kustomize build common/istio-1-21/kubeflow-istio-resources/base | kubectl apply -f -
+      run: kustomize build common/istio-1-22/kubeflow-istio-resources/base | kubectl apply -f -
 
     - name: Install KF Multi Tenancy
       run: ./tests/gh-actions/install_multi_tenancy.sh

.github/workflows/pipeline_test.yaml

@@ -49,7 +49,7 @@ jobs:
         run: ./tests/gh-actions/install_multi_tenancy.sh
 
       - name: Install kubeflow-istio-resources
-        run: kustomize build common/istio-1-21/kubeflow-istio-resources/base | kubectl apply -f -
+        run: kustomize build common/istio-1-22/kubeflow-istio-resources/base | kubectl apply -f -
 
       - name: Create KF Profile
         run: kustomize build common/user-namespace/base | kubectl apply -f -

README.md

@@ -64,7 +64,7 @@ used from the different projects of Kubeflow:
 
 | Component | Local Manifests Path | Upstream Revision |
 | - | - | - |
-| Istio | common/istio-1-21 | [1.21.3](https://github.com/istio/istio/releases/tag/1.21.3) |
+| Istio | common/istio-1-22 | [1.22.1](https://github.com/istio/istio/releases/tag/1.22.1) |
 | Knative | common/knative/knative-serving <br /> common/knative/knative-eventing | [v1.12.4](https://github.com/knative/serving/releases/tag/knative-v1.12.4) <br /> [v1.12.6](https://github.com/knative/eventing/releases/tag/knative-v1.12.6) |
 | Cert Manager | common/cert-manager | [1.14.5](https://github.com/cert-manager/cert-manager/releases/tag/v1.12.2) |
 
@@ -208,10 +208,10 @@ Install Istio:
 
 ```sh
 echo "Installing Istio configured with external authorization..."
-cd common/istio-1-21
-kustomize build common/istio-1-21/istio-crds/base | kubectl apply -f -
-kustomize build common/istio-1-21/istio-namespace/base | kubectl apply -f -
-kustomize build common/istio-1-21/istio-install/overlays/oauth2-proxy | kubectl apply -f -
+cd common/istio-1-22
+kustomize build common/istio-1-22/istio-crds/base | kubectl apply -f -
+kustomize build common/istio-1-22/istio-namespace/base | kubectl apply -f -
+kustomize build common/istio-1-22/istio-install/overlays/oauth2-proxy | kubectl apply -f -
 
 echo "Waiting for all Istio Pods to become ready..."
 kubectl wait --for=condition=Ready pods --all -n istio-system --timeout 300s
@@ -247,7 +247,7 @@ Install Knative Serving:
 
 ```sh
 kustomize build common/knative/knative-serving/overlays/gateways | kubectl apply -f -
-kustomize build common/istio-1-21/cluster-local-gateway/base | kubectl apply -f -
+kustomize build common/istio-1-22/cluster-local-gateway/base | kubectl apply -f -
 ```
 
 Optionally, you can install Knative Eventing which can be used for inference request logging:

common/istio-1-21/cluster-local-gateway/base/cluster-local-gateway.yaml → common/istio-1-22/cluster-local-gateway/base/cluster-local-gateway.yaml

@@ -69,8 +69,6 @@ spec:
         env:
         - name: ISTIO_META_ROUTER_MODE
           value: sni-dnat
-        - name: JWT_POLICY
-          value: third-party-jwt
         - name: PILOT_CERT_PROVIDER
           value: istiod
         - name: CA_ADDR
@@ -125,7 +123,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
-        image: docker.io/istio/proxyv2:1.21.3
+        image: docker.io/istio/proxyv2:1.22.1
         name: istio-proxy
         ports:
         - containerPort: 15020