1.6.11-install.yaml # GENERATED by running "istioctl manifest generate -f minimal.yaml" on version 1.6.11 istioctl where "minimal.yaml" is: #apiVersion: install.istio.io/v1alpha1 #kind: IstioOperator #spec: # hub: gcr.io/istio-release # revision: 1-6-11 # components: # base: # enabled: false # pilot: # enabled: true # ingressGateways: # # values: # global: # proxy: # resources: # requests: # cpu: 10m # memory: 40Mi # # addonComponents: # prometheus: # enabled: false # AddonComponents grafana component...

1.7.6-install.yaml # GENERATED by running "istioctl manifest generate -f minimal.yaml" on version 1.7.6 istioctl where "minimal.yaml" is: #apiVersion: install.istio.io/v1alpha1 #kind: IstioOperator #spec: # hub: gcr.io/istio-release # revision: 1-7-6 # components: # base: # enabled: false # pilot: # enabled: true # ingressGateways: # - name: istio-ingressgateway # enabled: false # # values: # global: # proxy: # resources: # requests: # cpu: 10m # memory: 40Mi apiVersion: networking.istio.io/v1alpha3...

    if [[ "${ENABLE_CLUSTER_DNS}" = true ]]; then
        cp "${KUBE_ROOT}/cluster/addons/dns/${DNS_ADDON}/${DNS_ADDON}.yaml.in" dns.yaml
        ${SED} -i -e "s/dns_domain/${DNS_DOMAIN}/g" dns.yaml
        ${SED} -i -e "s/dns_server/${DNS_SERVER_IP}/g" dns.yaml
        ${SED} -i -e "s/dns_memory_limit/${DNS_MEMORY_LIMIT}/g" dns.yaml
        # TODO update to dns role once we have one.
        # use kubectl to create dns addon

			config.New(t).
				Source(config.File("testdata/authz/mtls.yaml.tmpl")).
				Source(config.File("testdata/authz/deny-global.yaml.tmpl").WithParams(param.Params{
					param.Namespace.String(): istio.ClaimSystemNamespaceOrFail(t, t),
				})).
				Source(config.File("testdata/authz/deny-principal.yaml.tmpl").WithParams(
					param.Params{
						"Denied": denied,
					})).
				BuildAll(nil, to).

# Downloaded from https://github.com/metallb/metallb/raw/v0.13.12/config/manifests/metallb-native.yaml
# With quay.io hub replaced with gcr.io/istio-testing
# And probes tuned to startup faster
apiVersion: v1
kind: Namespace
metadata:
  labels:
    pod-security.kubernetes.io/audit: privileged
    pod-security.kubernetes.io/enforce: privileged
    pod-security.kubernetes.io/warn: privileged
  name: metallb-system
---
apiVersion: apiextensions.k8s.io/v1

`,
		"service.yaml": `
kind: Service
apiVersion: v1
metadata:
  name: the-service
spec:
  selector:
    deployment: hello
  type: LoadBalancer
  ports:
  - protocol: TCP
    port: 8666
    targetPort: 8080
`,
		"kustomization.yaml": `
nameprefix: test-
resources:
- deployment.yaml
- service.yaml
- configmap.yaml
`,
	}

		{
			desc:    "Empty config file content",
			config:  "testdata/invalid-configs/kms/invalid-content.yaml",
			want:    nil,
			wantErr: `encryption provider configuration file "testdata/invalid-configs/kms/invalid-content.yaml" is empty`,
		},
		{
			desc:    "Unable to decode",
			config:  "testdata/invalid-configs/kms/invalid-gvk.yaml",
			want:    nil,
			wantErr: `error decoding encryption provider configuration file`,
		},

Akhil Mohan <******@****.***> 1718184820 +0530

				{
					ConfigFile:    "beta-mtls-on.yaml",
					Namespace:     systemNM,
					Include:       Always,
					ExpectSuccess: SupportsHBone,
					// we do not expect HBONE traffic to have mutated user traffic
					// presently ExpectMTLS is checking that headers were added to user traffic
					ExpectMTLS: Never,
				},
				{
					ConfigFile:    "beta-mtls-permissive.yaml",
					Namespace:     systemNM,

Yangmin Zhu <******@****.***> 1624481702 -0700