release 1.10.3-airbnb3

istio: patch MX fix in pilot agent

This CL patches a fix for MX in pilot agent.
See https://github.com/istio/istio/pull/33043/commits/095205afa865c6f74439218f1be076c0a5e88f10
Slack thread: https://airbnb.slack.com/archives/GK783SG2W/p1630114602004900

Change-Id: I802fd5112367bbfcd28f0bfc9f9d962f6230d3b1
Reviewed-on: https://gerrit.musta.ch/c/public/istio/+/1591
Reviewed-by: Stephen Chan <[email protected]>
Reviewed-by: Ying Zhu <[email protected]>

release 1.10.3-airbnb2

1.10.3-airbnb1 is released on a wrong branch, re-release

release 1.10.3-airbnb1

Update values.yaml CODEOWNERS to current environments maintainers (#3…

1.10.2-airbnb1

updrade: add fix for 1.10.2

I am cherry picking following commits onto our release branch.
https://gerrit.musta.ch/c/public/istio/+/1391
https://gerrit.musta.ch/c/public/istio/+/1301

Change-Id: I654a7842ab64590714030bf116d1d9b4f36d9031
Reviewed-on: https://gerrit.musta.ch/c/public/istio/+/1467
Reviewed-by: Stephen Chan <[email protected]>
Reviewed-by: Ying Zhu <[email protected]>

1.9.5-airbnb3

autoregistration: allow bootstrap node to override locality

During testing of VM autoregistration, we discovered that it is not
possible to override the WorkloadGroup template's locality from the
bootstrap node locality. The core issue is that istiod initializes the
proxy struct from the bootstrap node before passing it to the
autoregistration controller; however, the node's locality is not set on
the proxy at that time. This is fixed by passing the bootstrap node
along to autoregistration code in addition to the proxy.

1.9.5-airbnb2

upgrade: add fix for 1.9.5

Istio 1.9.5 build is broken, see:
https://github.com/istio/istio/issues/32846

I am cherry picking fixing commit onto our release branch.
https://github.com/istio/istio/pull/32792

Change-Id: I853c0e126dd48383199e7ecf96aafe461278a332
Reviewed-on: https://gerrit.musta.ch/c/public/istio/+/1315
Reviewed-by: Stephen Chan <[email protected]>
Reviewed-by: Weibo He <[email protected]>

1.9.5-airbnb1

sds: add back flag for disabling sds server

This CL adds back the flag for disabling sds server which is removed
in https://github.com/istio/istio/pull/28672/files#diff-91e0a18a58ea36d2c656d7b2706c52917a74103820c07fc843f48a110c847678L434

SDS server requires access to remote cluster secrets which we don't
want. When this issue is resolved we can remove the patch:
https://github.com/istio/istio/issues/32364

Change-Id: I75ed380a227f0f9518aa440d707850041a23e712
Reviewed-on: https://gerrit.musta.ch/c/public/istio/+/1301
Reviewed-by: Weibo He <[email protected]>
Reviewed-by: Stephen Chan <[email protected]>

1.7.5-airbnb1

Release 1.7.5 with patches