Skip to content

Commit 55b41ba

Browse files
committed
istio-1.29: updated
1 parent e1fc79c commit 55b41ba

1 file changed

Lines changed: 290 additions & 0 deletions

File tree

istio-1.29.yaml

Lines changed: 290 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,290 @@
1+
package:
2+
name: istio-1.29
3+
version: "1.29.0"
4+
epoch: 0 # GHSA-jv3w-x3r3-g6rm
5+
description: Istio is an open source service mesh that layers transparently onto existing distributed applications.
6+
copyright:
7+
- license: Apache-2.0
8+
9+
var-transforms:
10+
- from: ${{package.version}}
11+
match: ^(\d+\.\d+)\.\d+$
12+
replace: "$1"
13+
to: major-minor-version
14+
15+
environment:
16+
contents:
17+
packages:
18+
- busybox
19+
- ca-certificates-bundle
20+
- go
21+
environment:
22+
CGO_ENABLED: "0"
23+
24+
pipeline:
25+
- uses: git-checkout
26+
with:
27+
repository: https://github.com/istio/istio
28+
tag: ${{package.version}}
29+
expected-commit: b155e9e7642e5c0a40ef199da8b20596e2a3d443
30+
31+
subpackages:
32+
- name: istio-cni-${{vars.major-minor-version}}
33+
pipeline:
34+
- uses: go/build
35+
with:
36+
packages: ./cni/cmd/istio-cni
37+
output: istio-cni
38+
ldflags: |
39+
-X istio.io/istio/pkg/version.buildVersion=${{package.version}}
40+
-X istio.io/istio/pkg/version.buildGitRevision=$(git rev-parse HEAD)
41+
-X istio.io/istio/pkg/version.buildTag=$(git describe --tags --always)
42+
-X istio.io/istio/pkg/version.buildStatus="Clean"
43+
extra-args: "-buildvcs=false"
44+
- uses: strip
45+
dependencies:
46+
provides:
47+
- istio-cni=${{package.full-version}}
48+
test:
49+
pipeline:
50+
- uses: test/virtualpackage
51+
with:
52+
virtual-pkg-name: istio-cni
53+
real-pkg-name: ${{subpkg.name}}
54+
55+
- name: istioctl-${{vars.major-minor-version}}
56+
pipeline:
57+
- uses: go/build
58+
with:
59+
packages: ./istioctl/cmd/istioctl
60+
output: istioctl
61+
ldflags: |
62+
-X istio.io/istio/pkg/version.buildVersion=${{package.version}}
63+
-X istio.io/istio/pkg/version.buildGitRevision=$(git rev-parse HEAD)
64+
-X istio.io/istio/pkg/version.buildTag=$(git describe --tags --always)
65+
-X istio.io/istio/pkg/version.buildStatus="Clean"
66+
extra-args: "-buildvcs=false"
67+
dependencies:
68+
provides:
69+
- istioctl=${{package.full-version}}
70+
test:
71+
pipeline:
72+
- runs: |
73+
istioctl version --remote=false
74+
istioctl --help
75+
76+
- name: istioctl-bash-completion-${{vars.major-minor-version}}
77+
dependencies:
78+
provides:
79+
- istioctl-bash-completion=${{package.full-version}}
80+
runtime:
81+
- istioctl-${{vars.major-minor-version}}
82+
- bash-completion
83+
pipeline:
84+
- runs: |
85+
mkdir -p "${{targets.contextdir}}"/usr/share/bash-completion/completions
86+
${{targets.outdir}}/istioctl-${{vars.major-minor-version}}/usr/bin/istioctl completion bash > "${{targets.contextdir}}"/usr/share/bash-completion/completions/istioctl-${{vars.major-minor-version}}
87+
test:
88+
pipeline:
89+
- runs: stat /usr/share/bash-completion/completions/istioctl-${{vars.major-minor-version}}
90+
91+
- name: istioctl-zsh-completion-${{vars.major-minor-version}}
92+
dependencies:
93+
provides:
94+
- istioctl-zsh-completion=${{package.full-version}}
95+
runtime:
96+
- istioctl-${{vars.major-minor-version}}
97+
pipeline:
98+
- runs: |
99+
mkdir -p "${{targets.contextdir}}"/usr/share/zsh/site-functions
100+
${{targets.outdir}}/istioctl-${{vars.major-minor-version}}/usr/bin/istioctl completion zsh > "${{targets.contextdir}}"/usr/share/zsh/site-functions/istioctl-${{vars.major-minor-version}}
101+
test:
102+
pipeline:
103+
- runs: stat /usr/share/zsh/site-functions/istioctl-${{vars.major-minor-version}}
104+
105+
- name: istio-cni-${{vars.major-minor-version}}-compat
106+
pipeline:
107+
- runs: |
108+
# See https://github.com/istio/istio/blob/1.20.2/cni/deployments/kubernetes/Dockerfile.install-cni
109+
mkdir -p ${{targets.subpkgdir}}/opt/cni/bin
110+
ln -sf /usr/bin/istio-cni ${{targets.subpkgdir}}/opt/cni/bin/istio-cni
111+
dependencies:
112+
provides:
113+
- istio-cni-compat=${{package.full-version}}
114+
test:
115+
pipeline:
116+
- uses: test/virtualpackage
117+
with:
118+
virtual-pkg-name: istio-cni-compat
119+
real-pkg-name: ${{subpkg.name}}
120+
121+
- name: istio-install-cni-${{vars.major-minor-version}}
122+
pipeline:
123+
- uses: go/build
124+
with:
125+
packages: ./cni/cmd/install-cni
126+
output: install-cni
127+
ldflags: |
128+
-X istio.io/istio/pkg/version.buildVersion=${{package.version}}
129+
-X istio.io/istio/pkg/version.buildGitRevision=$(git rev-parse HEAD)
130+
-X istio.io/istio/pkg/version.buildTag=$(git describe --tags --always)
131+
-X istio.io/istio/pkg/version.buildStatus="Clean"
132+
extra-args: "-buildvcs=false"
133+
- uses: strip
134+
dependencies:
135+
provides:
136+
- istio-install-cni=${{package.full-version}}
137+
test:
138+
pipeline:
139+
- uses: test/virtualpackage
140+
with:
141+
virtual-pkg-name: istio-install-cni
142+
real-pkg-name: ${{subpkg.name}}
143+
144+
- name: istio-install-cni-${{vars.major-minor-version}}-compat
145+
pipeline:
146+
- runs: |
147+
# See https://github.com/istio/istio/blob/1.20.0/cni/deployments/kubernetes/Dockerfile.install-cni
148+
mkdir -p ${{targets.subpkgdir}}/usr/local/bin
149+
ln -sf /usr/bin/install-cni ${{targets.subpkgdir}}/usr/local/bin/install-cni
150+
dependencies:
151+
provides:
152+
- istio-install-cni-compat=${{package.full-version}}
153+
test:
154+
pipeline:
155+
- uses: test/virtualpackage
156+
with:
157+
virtual-pkg-name: istio-install-cni-compat
158+
real-pkg-name: ${{subpkg.name}}
159+
160+
- name: istio-pilot-agent-${{vars.major-minor-version}}
161+
pipeline:
162+
- uses: go/build
163+
with:
164+
packages: ./pilot/cmd/pilot-agent
165+
output: pilot-agent
166+
# Extracted from https://github.com/istio/istio/blob/4358b84b911a80ba09ef36ac00ad85535a77e7ca/common/scripts/report_build_info.sh#L41-L48
167+
# Use this instead for buildStatus once our pipeline stops dirtying the git tree: "$(if git diff-index --quiet HEAD --; then echo "Clean"; else echo "Modified"; fi)"
168+
ldflags: |
169+
-X istio.io/istio/pkg/version.buildVersion=${{package.version}}
170+
-X istio.io/istio/pkg/version.buildGitRevision=$(git rev-parse HEAD)
171+
-X istio.io/istio/pkg/version.buildTag=$(git describe --tags --always)
172+
-X istio.io/istio/pkg/version.buildStatus="Clean"
173+
extra-args: "-buildvcs=false"
174+
- runs: |
175+
mkdir -p ${{targets.subpkgdir}}/var/lib/istio/envoy
176+
cp ./tools/packaging/common/envoy_bootstrap.json \
177+
${{targets.subpkgdir}}/var/lib/istio/envoy/envoy_bootstrap_tmpl.json
178+
179+
- name: istio-pilot-agent-${{vars.major-minor-version}}-compat
180+
pipeline:
181+
- runs: |
182+
# link /usr/local/bin/pilot-agent -> /usr/bin/pilot-agent to match
183+
# what the Istio Helm charts may expect.
184+
mkdir -p ${{targets.subpkgdir}}/usr/local/bin
185+
ln -sf /usr/bin/pilot-agent ${{targets.subpkgdir}}/usr/local/bin/pilot-agent
186+
dependencies:
187+
provides:
188+
- istio-pilot-agent-compat=${{package.full-version}}
189+
test:
190+
pipeline:
191+
- uses: test/virtualpackage
192+
with:
193+
virtual-pkg-name: istio-pilot-agent-compat
194+
real-pkg-name: ${{subpkg.name}}
195+
196+
- name: istio-pilot-discovery-${{vars.major-minor-version}}
197+
pipeline:
198+
- uses: go/build
199+
with:
200+
packages: ./pilot/cmd/pilot-discovery
201+
output: pilot-discovery
202+
# Extracted from https://github.com/istio/istio/blob/4358b84b911a80ba09ef36ac00ad85535a77e7ca/common/scripts/report_build_info.sh#L41-L48
203+
# Use this instead for buildStatus once our pipeline stops dirtying the git tree: "$(if git diff-index --quiet HEAD --; then echo "Clean"; else echo "Modified"; fi)"
204+
ldflags: |
205+
-X istio.io/istio/pkg/version.buildVersion=${{package.version}}
206+
-X istio.io/istio/pkg/version.buildGitRevision=$(git rev-parse HEAD)
207+
-X istio.io/istio/pkg/version.buildTag=$(git describe --tags --always)
208+
-X istio.io/istio/pkg/version.buildStatus="Clean"
209+
extra-args: "-buildvcs=false"
210+
- runs: |
211+
mkdir -p ${{targets.subpkgdir}}/var/lib/istio/envoy
212+
cp ./tools/packaging/common/envoy_bootstrap.json \
213+
${{targets.subpkgdir}}/var/lib/istio/envoy/envoy_bootstrap_tmpl.json
214+
215+
- name: istio-pilot-discovery-${{vars.major-minor-version}}-compat
216+
pipeline:
217+
- runs: |
218+
# link /usr/local/bin/pilot-discovery -> /usr/bin/pilot-discovery to match
219+
# what the Istio Helm charts may expect.
220+
mkdir -p ${{targets.subpkgdir}}/usr/local/bin
221+
ln -sf /usr/bin/pilot-discovery ${{targets.subpkgdir}}/usr/local/bin/pilot-discovery
222+
dependencies:
223+
provides:
224+
- istio-discovery-compat=${{package.full-version}}
225+
test:
226+
pipeline:
227+
- uses: test/virtualpackage
228+
with:
229+
virtual-pkg-name: istio-discovery-compat
230+
real-pkg-name: ${{subpkg.name}}
231+
232+
- name: ${{package.name}}-base
233+
description: Package for Istio base image with common utilities
234+
dependencies:
235+
provides:
236+
- istio-base=${{package.full-version}}
237+
runtime:
238+
- bash
239+
- bind-tools
240+
- ca-certificates
241+
- conntrack-tools
242+
- curl
243+
- iproute2
244+
- iptables
245+
- iputils
246+
- lsof
247+
- net-tools
248+
- netcat-openbsd
249+
- nftables
250+
- sudo
251+
- tcpdump
252+
pipeline:
253+
- runs: |
254+
if ! diff -q docker/Dockerfile.base Dockerfile.base; then
255+
echo "Dockerfile has changed since last build, please update istio-1.28/Dockerfile.base and runtime dependencies"
256+
exit 1
257+
fi
258+
test:
259+
pipeline:
260+
- uses: test/emptypackage
261+
262+
update:
263+
enabled: true
264+
ignore-regex-patterns:
265+
- '-rc'
266+
- '-beta'
267+
github:
268+
identifier: istio/istio
269+
tag-filter-prefix: 1.29.
270+
use-tag: true
271+
272+
test:
273+
environment:
274+
contents:
275+
packages:
276+
- jq
277+
- grep
278+
- istio-pilot-agent-${{vars.major-minor-version}}
279+
- istio-pilot-discovery-${{vars.major-minor-version}}
280+
pipeline:
281+
- runs: |
282+
# check version/tag/commit are not "unknown" for pilot-discovery
283+
pilot-discovery version -o json | jq .clientVersion.version | grep -q ${{package.version}}
284+
pilot-discovery version -o json | jq .clientVersion.revision | grep -qv unknown
285+
pilot-discovery version -o json | jq .clientVersion.tag | grep -qv unknown
286+
287+
# check version/tag/commit are not "unknown" for pilot-agent
288+
pilot-agent version -o json | jq .clientVersion.version | grep -q ${{package.version}}
289+
pilot-agent version -o json | jq .clientVersion.revision | grep -qv unknown
290+
pilot-agent version -o json | jq .clientVersion.tag | grep -qv unknown

0 commit comments

Comments
 (0)