Merge pull request #710 from cloudfoundry/istio-1-14-0

Upgrade Istio to 1.14.0

build/istio/overlays/kapp-compatible.yaml

@@ -2,44 +2,6 @@
 
 #! These overlays are required to make Istio compatible with kapp deploy
 
-#! remove empty caBundle key to avoid having kapp consider it
-#! as a change from what cluster automatically fills in
-#@overlay/match by=overlay.subset({"kind":"MutatingWebhookConfiguration", "metadata":{"name": "istio-sidecar-injector"}})
----
-webhooks:
-#@overlay/match by="name"
-- name: rev.namespace.sidecar-injector.istio.io
-  clientConfig:
-    #@overlay/remove
-    caBundle:
-
-#@overlay/match by=overlay.subset({"kind":"MutatingWebhookConfiguration", "metadata":{"name": "istio-sidecar-injector"}})
----
-webhooks:
-#@overlay/match by="name"
-- name: rev.object.sidecar-injector.istio.io
-  clientConfig:
-    #@overlay/remove
-    caBundle:
-
-#@overlay/match by=overlay.subset({"kind":"MutatingWebhookConfiguration", "metadata":{"name": "istio-sidecar-injector"}})
----
-webhooks:
-#@overlay/match by="name"
-- name: namespace.sidecar-injector.istio.io
-  clientConfig:
-    #@overlay/remove
-    caBundle:
-
-#@overlay/match by=overlay.subset({"kind":"MutatingWebhookConfiguration", "metadata":{"name": "istio-sidecar-injector"}})
----
-webhooks:
-#@overlay/match by="name"
-- name: object.sidecar-injector.istio.io
-  clientConfig:
-    #@overlay/remove
-    caBundle:
-
 #! PodDisruptionBudget cannot be updated in place, so allow kapp to replace for upgrade
 #@overlay/match by=overlay.subset({"kind": "PodDisruptionBudget"}), expects="1+"
 ---

build/istio/values.yaml

@@ -5,7 +5,7 @@
 #! These values cannot be changed later when rendering cf-for-k8s templates.
 #! Values related to CF should NOT be in this file.
 
-istio_version: 1.13.4
+istio_version: 1.14.0
 
 fluentbit:
   image: cloudfoundry/cf-k8s-networking-fluentbit@sha256:64d67dc076d4160c351272261d7730c08c1b906a881d1812778b6da93871d4e4