upgrade istio to 1.23 (#1039)

upgrade istio to 1-23 --------- Signed-off-by: Gerd Oberlechner <[email protected]>
Azure · Jan 7, 2025 · ac5667e · ac5667e
1 parent 56a045b
commit ac5667e
Show file tree

Hide file tree

Showing 6 changed files with 23 additions and 13 deletions.
diff --git a/config/config.yaml b/config/config.yaml
@@ -31,8 +31,8 @@ defaults:
     istio:
       istioctlVersion: "1.23.1"
       tag: "prod-stable"
-      targetVersion: "asm-1-22"
-      versions: "asm-1-22"
+      targetVersion: "asm-1-23"
+      versions: "asm-1-22,asm-1-23"
 
   # MGMT cluster specifics
   mgmt:

diff --git a/config/public-cloud-cs-pr.json b/config/public-cloud-cs-pr.json
@@ -180,8 +180,8 @@
     "istio": {
       "istioctlVersion": "1.23.1",
       "tag": "prod-stable",
-      "targetVersion": "asm-1-22",
-      "versions": "asm-1-22"
+      "targetVersion": "asm-1-23",
+      "versions": "asm-1-22,asm-1-23"
     },
     "rg": "hcp-underlay-cspr-svc",
     "subscription": "ARO Hosted Control Planes (EA Subscription 1)",

diff --git a/config/public-cloud-dev.json b/config/public-cloud-dev.json
@@ -180,8 +180,8 @@
     "istio": {
       "istioctlVersion": "1.23.1",
       "tag": "prod-stable",
-      "targetVersion": "asm-1-22",
-      "versions": "asm-1-22"
+      "targetVersion": "asm-1-23",
+      "versions": "asm-1-22,asm-1-23"
     },
     "rg": "hcp-underlay-dev-svc",
     "subscription": "ARO Hosted Control Planes (EA Subscription 1)",

diff --git a/config/public-cloud-personal-dev.json b/config/public-cloud-personal-dev.json
@@ -180,8 +180,8 @@
     "istio": {
       "istioctlVersion": "1.23.1",
       "tag": "prod-stable",
-      "targetVersion": "asm-1-22",
-      "versions": "asm-1-22"
+      "targetVersion": "asm-1-23",
+      "versions": "asm-1-22,asm-1-23"
     },
     "rg": "hcp-underlay-usw3tst-svc",
     "subscription": "ARO Hosted Control Planes (EA Subscription 1)",

diff --git a/dev-infrastructure/Makefile b/dev-infrastructure/Makefile
@@ -213,7 +213,10 @@ svc: svc.rg
 			configurations/svc-cluster.bicepparam \
 		--parameters \
 			persist=${PERSIST}
-	@TARGET_VERSION=$(ISTIO_TARGET_VERSION) ISTIOCTL_VERSION=$(ISTIOCTL_VERSION) TAG=$(ISTIO_TAG) scripts/istio.sh
+
+	@scripts/aks-admin-access.sh $(SVC_RESOURCEGROUP) $(PRINCIPAL_ID)
+	@scripts/aks-kubeconfig.sh $(SVC_RESOURCEGROUP) $(AKS_NAME) "$(SVC_KUBECONFIG_FILE)"
+	@KUBEONFIG=$(SVC_KUBECONFIG_FILE) TARGET_VERSION=$(ISTIO_TARGET_VERSION) ISTIOCTL_VERSION=$(ISTIOCTL_VERSION) TAG=$(ISTIO_TAG) scripts/istio.sh
 .PHONY: svc
 
 svc.enable-aks-metrics:
@@ -244,8 +247,7 @@ svc.aks.admin-access:
 .PHONY: svc.aks.admin-access
 
 svc.aks.kubeconfig:
-	@az aks get-credentials --overwrite-existing --only-show-errors -n ${AKS_NAME} -g $(SVC_RESOURCEGROUP) -f "${SVC_KUBECONFIG_FILE}"
-	@kubelogin convert-kubeconfig -l azurecli --kubeconfig "${SVC_KUBECONFIG_FILE}"
+	@scripts/aks-kubeconfig.sh $(SVC_RESOURCEGROUP) $(AKS_NAME) "$(SVC_KUBECONFIG_FILE)"
 .PHONY: svc.aks.kubeconfig
 
 svc.aks.kubeconfigfile:
@@ -357,8 +359,7 @@ mgmt.aks.admin-access:
 .PHONY: mgmt.aks.admin-access
 
 mgmt.aks.kubeconfig: mgmt.aks.kubeconfigfile
-	@az aks get-credentials --overwrite-existing --only-show-errors -n ${AKS_NAME} -g $(MGMT_RESOURCEGROUP) -f "${MGMT_KUBECONFIG_FILE}"
-	@kubelogin convert-kubeconfig -l azurecli --kubeconfig "${MGMT_KUBECONFIG_FILE}"
+	@scripts/aks-kubeconfig.sh $(MGMT_RESOURCEGROUP) $(AKS_NAME) "$(MGMT_KUBECONFIG_FILE)"
 .PHONY: mgmt.aks.kubeconfig
 
 mgmt.aks.kubeconfigfile:

diff --git a/dev-infrastructure/scripts/aks-kubeconfig.sh b/dev-infrastructure/scripts/aks-kubeconfig.sh
@@ -0,0 +1,9 @@
+#!/bin/sh
+set -e
+
+RESOURCEGROUP=$1
+AKS_NAME=$2
+FILENAME=$3
+
+az aks get-credentials --overwrite-existing --only-show-errors -n ${AKS_NAME} -g ${RESOURCEGROUP} -f ${FILENAME}
+kubelogin convert-kubeconfig -l azurecli --kubeconfig "${FILENAME}"