Developer Maintenance📜
How to upgrade the Istio Gateway Package chart📜
istio-gateway
is a passthrough chart. That means it does not fork an upstream
chart but instead embeds one as a dependency. Because of this, the upgrade
process is incredibly simple.
-
Checkout the branch that renovate created. This branch will have the image tag updates and typically some other necessary version changes that you will want. You can either work off of this branch or branch off of it.
-
Update dependency archives via
helm
(from repository root)helm dependency update ./chart
-
Update version references for the chart in
Chart.yaml
.version
should be<version>-bb.0
(ex:1.25.1-bb.0
) andappVersion
should be<version>
(ex:1.25.1
). Also validate that the Big Bangbigbang.dev/applicationVersions
andhelm.sh/images
annotations are update to reflect the chart’s new application and image versions. -
Add an entry to
CHANGELOG.md
detailing what changed in the update. At a minimum mention updating the dependency chart. -
Regenerate the readme following the steps in Gluon.
-
Open an MR (or check the one that Renovate created for you) and validate that the pipeline is successful.
-
Follow the testing steps below for some manual confirmations.
Testing new Istio Gateway version📜
Generally, an istio-gateway
update should be tested alongside the new versions
of istio-base
and istiod
. Follow the steps outlined in the Istio base/istod
Development Maintenance Guide
Big Bang components incorporated into this chart📜
- Added
networkPolicies
section to enable default network policies and allow custom additional network policies to be added.
networkPolicies:
enabled: true
additionalPolicies: []
- Added the following
mtls
section to enable mutual TLS used inchart/templates/bigbang/istio/peer-authentications/default.yaml
:
mtls:
# -- STRICT = Allow only mutual TLS traffic,
# PERMISSIVE = Allow both plain text and mutual TLS traffic
mode: STRICT