Developer Maintenance📜
How to upgrade the Istio Gateway Package chart📜
istio-gateway is a passthrough chart. That means it does not fork an upstream
chart but instead embeds one as a dependency. Because of this, the upgrade
process is incredibly simple.
-
Checkout the branch that renovate created. This branch will have the image tag updates and typically some other necessary version changes that you will want. You can either work off of this branch or branch off of it.
-
Update dependency archives via
helm(from repository root)helm dependency update ./chart -
Update version references for the chart in
Chart.yaml.versionshould be<version>-bb.0(ex:1.25.1-bb.0) andappVersionshould be<version>(ex:1.25.1). Also validate that the Big Bangbigbang.dev/applicationVersionsandhelm.sh/imagesannotations are update to reflect the chart’s new application and image versions. -
Add an entry to
CHANGELOG.mddetailing what changed in the update. At a minimum mention updating the dependency chart. -
Regenerate the readme following the steps in Gluon.
-
Open an MR (or check the one that Renovate created for you) and validate that the pipeline is successful.
-
Follow the testing steps below for some manual confirmations.
Testing new Istio Gateway version📜
Generally, an istio-gateway update should be tested alongside the new versions
of istio-base and istiod. Follow the steps outlined in the Istio base/istod
Development Maintenance Guide
Big Bang components incorporated into this chart📜
- Added
networkPoliciessection to enable default network policies and allow custom additional network policies to be added.
networkPolicies:
enabled: true
additionalPolicies: []
- Added the following
mtlssection to enable mutual TLS used inchart/templates/bigbang/istio/peer-authentications/default.yaml:
mtls:
# -- STRICT = Allow only mutual TLS traffic,
# PERMISSIVE = Allow both plain text and mutual TLS traffic
mode: STRICT