pluralsh · davidspek · Sep 13, 2023 · Sep 13, 2023 · Sep 14, 2023 · Sep 14, 2023
@@ -1,9 +1,9 @@
 dependencies:
 - name: cni
   repository: https://istio-release.storage.googleapis.com/charts
-  version: 1.19.0
+  version: 1.20.1
 - name: ztunnel
   repository: https://istio-release.storage.googleapis.com/charts
-  version: 1.19.0
-digest: sha256:5f9e835cde6c2cda3a01add30d38cee44a3c2595306f17914015c3ee3ed6e0d8
-generated: "2023-09-11T12:24:33.670239+02:00"
+  version: 1.20.1
+digest: sha256:8b8e82bd564ae60e514e263ab189d9adb8950ea96328455b8db6942414296dcf
+generated: "2024-01-02T12:39:06.271052+01:00"
@@ -3,13 +3,13 @@ name: istio-cni
 description: helm chart for istio-cni
 type: application
 version: 0.1.1
-appVersion: "1.19.0"
+appVersion: "1.20.1"
 dependencies:
 - name: cni
-  version: 1.19.0
+  version: 1.20.1
   repository: https://istio-release.storage.googleapis.com/charts
   condition: cni.enabled
 - name: ztunnel
-  version: 1.19.0
+  version: 1.20.1
   repository: https://istio-release.storage.googleapis.com/charts
   condition: ztunnel.enabled
@@ -1,6 +1,6 @@
 dependencies:
 - name: gateway
   repository: https://istio-release.storage.googleapis.com/charts
-  version: 1.19.0
-digest: sha256:518d9b00690f92ce7a833150409637c6ad5b96a7fe203114e53c265166f702f3
-generated: "2023-09-11T12:39:30.936515+02:00"
+  version: 1.20.1
+digest: sha256:3102d001678122a5133dd1ef858f955f05b5aa033c7b6e95e4e6172602f61033
+generated: "2024-01-02T12:41:38.313944+01:00"
@@ -3,9 +3,9 @@ name: istio-ingress
 description: helm chart for istio-ingress
 type: application
 version: 0.1.1
-appVersion: "1.19.0"
+appVersion: "1.20.1"
 dependencies:
 - name: gateway
-  version: 1.19.0
+  version: 1.20.1
   repository: https://istio-release.storage.googleapis.com/charts
   condition: gateway.enabled
@@ -10,6 +10,8 @@ gateway:
     labelSelector:
       matchLabels:
         istio: ingress
+  service:
+    externalTrafficPolicy: Local
 
 istioGateway:
   enabled: true

@@ -3,11 +3,9 @@ gateway:
   service:
     annotations:
       service.beta.kubernetes.io/aws-load-balancer-name: {{ .Cluster }}-istio-nlb
-      service.beta.kubernetes.io/aws-load-balancer-proxy-protocol: '*'
       service.beta.kubernetes.io/aws-load-balancer-scheme: internet-facing
       service.beta.kubernetes.io/aws-load-balancer-type: external
       service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: instance
-      proxy.istio.io/config: '{"gatewayTopology" : { "numTrustedProxies": 2 } }'
 {{- end }}
 
 provider: {{ .Provider }}

@@ -1,9 +1,9 @@
 dependencies:
 - name: base
   repository: https://istio-release.storage.googleapis.com/charts
-  version: 1.19.0
+  version: 1.20.1
 - name: istiod
   repository: https://istio-release.storage.googleapis.com/charts
-  version: 1.19.0
-digest: sha256:9af8a05504305c68c87dd6195b63f1c2cf82e9fec521335bba19da353cee743e
-generated: "2023-09-11T12:24:02.323413+02:00"
+  version: 1.20.1
+digest: sha256:487709530fb91937122f1d8d202129e8d4b0216c5b6af86f86fa772761f8163c
+generated: "2024-01-02T12:36:34.799986+01:00"
@@ -3,13 +3,13 @@ name: istio
 description: A chart bundling the istio operator for plural
 type: application
 version: 0.2.1
-appVersion: "1.19.0"
+appVersion: "1.20.1"
 dependencies:
 - name: base
-  version: 1.19.0
+  version: 1.20.1
   repository: https://istio-release.storage.googleapis.com/charts
   condition: base.enabled
 - name: istiod
-  version: 1.19.0
+  version: 1.20.1
   repository: https://istio-release.storage.googleapis.com/charts
   condition: istiod.enabled
@@ -39,6 +39,7 @@ istiod:
         memory: 2048Mi
     env:
       PILOT_ENABLE_STATUS: "true" # Needed for KNative
+      PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING: "true" # Needed for KNative
       VERIFY_CERTIFICATE_AT_CLIENT: "true" # More secure
       # ENABLE_AUTO_SNI: "true" # Possibly needed for ambient mode
       # PILOT_ENABLE_HBONE: "true" # Needed for ambient mode

@@ -1,6 +1,6 @@
 dependencies:
 - name: kiali-server
   repository: https://kiali.org/helm-charts
-  version: 1.73.0
-digest: sha256:ae1594c1ad4ef754c30fbda9583da93c08fdf8b904d75cbd9f7c46117c39119d
-generated: "2023-09-01T15:42:45.406451+02:00"
+  version: 1.78.0
+digest: sha256:19be4849402ff6785ad59a773f331a908e637311c8dba51c14735118dc9fdbc5
+generated: "2024-01-02T15:06:49.894319+01:00"
@@ -3,9 +3,9 @@ name: kiali
 description: helm chart for kiali
 type: application
 version: 0.1.1
-appVersion: "v1.73.0"
+appVersion: v1.78.0
 dependencies:
 - name: kiali-server
-  version: 1.73.0
+  version: 1.78.0
   repository: https://kiali.org/helm-charts
   condition: kiali-server.enabled
@@ -0,0 +1,6 @@
+dependencies:
+- name: knative-serving
+  repository: oci://ghcr.io/davidspek/charts
+  version: 0.1.17
+digest: sha256:7305a706142cd119f96f3a77ea47d426712c97a579172498ff672447a16d07f0
+generated: "2023-12-20T17:18:44.037453+01:00"
@@ -3,4 +3,8 @@ name: knative-serving
 description: Installs knative for plural
 type: application
 version: 0.1.25
-appVersion: "0.26.0"
+appVersion: "1.12.2"
+dependencies:
+- name: knative-serving
+  repository: oci://ghcr.io/davidspek/charts
+  version: 0.1.17
@@ -0,0 +1,132 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: certificates.networking.internal.knative.dev
+  labels:
+    app.kubernetes.io/name: knative-serving
+    app.kubernetes.io/component: networking
+    app.kubernetes.io/version: "1.12.2"
+    knative.dev/crd-install: "true"
+spec:
+  group: networking.internal.knative.dev
+  versions:
+    - name: v1alpha1
+      served: true
+      storage: true
+      subresources:
+        status: {}
+      schema:
+        openAPIV3Schema:
+          description: Certificate is responsible for provisioning a SSL certificate for the given hosts. It is a Knative abstraction for various SSL certificate provisioning solutions (such as cert-manager or self-signed SSL certificate).
+          type: object
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: 'Spec is the desired state of the Certificate. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+              type: object
+              required:
+                - dnsNames
+                - secretName
+              properties:
+                dnsNames:
+                  description: DNSNames is a list of DNS names the Certificate could support. The wildcard format of DNSNames (e.g. *.default.example.com) is supported.
+                  type: array
+                  items:
+                    type: string
+                domain:
+                  description: Domain is the top level domain of the values for DNSNames.
+                  type: string
+                secretName:
+                  description: SecretName is the name of the secret resource to store the SSL certificate in.
+                  type: string
+            status:
+              description: 'Status is the current state of the Certificate. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+              type: object
+              properties:
+                annotations:
+                  description: Annotations is additional Status fields for the Resource to save some additional State as well as convey more information to the user. This is roughly akin to Annotations on any k8s resource, just the reconciler conveying richer information outwards.
+                  type: object
+                  additionalProperties:
+                    type: string
+                conditions:
+                  description: Conditions the latest available observations of a resource's current state.
+                  type: array
+                  items:
+                    description: 'Condition defines a readiness condition for a Knative resource. See: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#typical-status-properties'
+                    type: object
+                    required:
+                      - status
+                      - type
+                    properties:
+                      lastTransitionTime:
+                        description: LastTransitionTime is the last time the condition transitioned from one status to another. We use VolatileTime in place of metav1.Time to exclude this from creating equality.Semantic differences (all other things held constant).
+                        type: string
+                      message:
+                        description: A human readable message indicating details about the transition.
+                        type: string
+                      reason:
+                        description: The reason for the condition's last transition.
+                        type: string
+                      severity:
+                        description: Severity with which to treat failures of this type of condition. When this is not specified, it defaults to Error.
+                        type: string
+                      status:
+                        description: Status of the condition, one of True, False, Unknown.
+                        type: string
+                      type:
+                        description: Type of condition.
+                        type: string
+                http01Challenges:
+                  description: HTTP01Challenges is a list of HTTP01 challenges that need to be fulfilled in order to get the TLS certificate..
+                  type: array
+                  items:
+                    description: HTTP01Challenge defines the status of a HTTP01 challenge that a certificate needs to fulfill.
+                    type: object
+                    properties:
+                      serviceName:
+                        description: ServiceName is the name of the service to serve HTTP01 challenge requests.
+                        type: string
+                      serviceNamespace:
+                        description: ServiceNamespace is the namespace of the service to serve HTTP01 challenge requests.
+                        type: string
+                      servicePort:
+                        description: ServicePort is the port of the service to serve HTTP01 challenge requests.
+                        anyOf:
+                          - type: integer
+                          - type: string
+                        x-kubernetes-int-or-string: true
+                      url:
+                        description: URL is the URL that the HTTP01 challenge is expected to serve on.
+                        type: string
+                notAfter:
+                  description: The expiration time of the TLS certificate stored in the secret named by this resource in spec.secretName.
+                  type: string
+                  format: date-time
+                observedGeneration:
+                  description: ObservedGeneration is the 'Generation' of the Service that was last processed by the controller.
+                  type: integer
+                  format: int64
+      additionalPrinterColumns:
+        - name: Ready
+          type: string
+          jsonPath: ".status.conditions[?(@.type==\"Ready\")].status"
+        - name: Reason
+          type: string
+          jsonPath: ".status.conditions[?(@.type==\"Ready\")].reason"
+  names:
+    kind: Certificate
+    plural: certificates
+    singular: certificate
+    categories:
+      - knative-internal
+      - networking
+    shortNames:
+      - kcert
+  scope: Namespaced
@@ -0,0 +1,49 @@
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  name: clusterdomainclaims.networking.internal.knative.dev
+  labels:
+    app.kubernetes.io/name: knative-serving
+    app.kubernetes.io/component: networking
+    app.kubernetes.io/version: "1.12.2"
+    knative.dev/crd-install: "true"
+spec:
+  group: networking.internal.knative.dev
+  versions:
+    - name: v1alpha1
+      served: true
+      storage: true
+      subresources:
+        status: {}
+      schema:
+        openAPIV3Schema:
+          description: ClusterDomainClaim is a cluster-wide reservation for a particular domain name.
+          type: object
+          properties:
+            apiVersion:
+              description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+              type: string
+            kind:
+              description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+              type: string
+            metadata:
+              type: object
+            spec:
+              description: 'Spec is the desired state of the ClusterDomainClaim. More info: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#spec-and-status'
+              type: object
+              required:
+                - namespace
+              properties:
+                namespace:
+                  description: Namespace is the namespace which is allowed to create a DomainMapping using this ClusterDomainClaim's name.
+                  type: string
+  names:
+    kind: ClusterDomainClaim
+    plural: clusterdomainclaims
+    singular: clusterdomainclaim
+    categories:
+      - knative-internal
+      - networking
+    shortNames:
+      - cdc
+  scope: Cluster