Status in 1.31
Istio 1.31 baut auf Gateway API v1.6 (HTTPRoute,
GRPCRoute, TLSRoute,
ListenerSet, BackendTLSPolicy,
TCPRoute jetzt v1). CRDs vor dem
Istio-Upgrade einspielen: zu alte CRDs ignoriert istiod still
(TLSRoute < v1.5, TCPRoute < v1.6),
istioctl analyze meldet IST0176. Neue
Projekte: Gateway API, networking.istio.io bleibt
supportet.
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata: {name: web, namespace: istio-system}
spec:
gatewayClassName: istio
listeners:
- name: https
hostname: www.istio-cheatsheet.de
port: 443
protocol: HTTPS
tls:
certificateRefs:
- {name: web-cert}
allowedRoutes: # Default Same, Prod: Selector
namespaces: {from: All}
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata: {name: site, namespace: web}
spec:
parentRefs: [{name: web, namespace: istio-system}]
hostnames: ["www.istio-cheatsheet.de"]
rules:
- matches: [{path: {type: PathPrefix, value: /}}]
backendRefs: [{name: nginx, port: 80}]