Istio 1.8 Upgrade Blockers

Description

To upgrade to Istio 1.8 a few things need to be addressed for a seamless upgrade.

High Level

Pre 1.8 upgrade

• All users must be on Iron Bank Istio images 1.7.7 or greater (needs proxy environment variable ). dsop/opensource/istio-1.8/proxyv2#2 (closed)
• All EnvoyFilters must have a proxyVersion selector and current ones be pinned to Istio 1.7. https://istio.io/latest/news/releases/1.7.x/announcing-1.7/upgrade-notes/#envoyfilter-syntax-change

Changes required for 1.8

Create new EnvoyFilters alongside 1.7 ones with new naming scheme

• Update filter names
  • https://www.envoyproxy.io/docs/envoy/latest/version_history/v1.14.0#deprecated
  • https://istio.io/latest/news/releases/1.8.x/announcing-1.8/upgrade-notes/#use-the-new-filter-names-for-envoyfilter
• Use v3 TypedConfig - https://www.envoyproxy.io/docs/envoy/latest/api-v3/extensions/filters/network/ext_authz/v3/ext_authz.proto#extensions-filters-network-ext-authz-v3-extauthz

https://istio.io/latest/news/releases/1.8.x/announcing-1.8/upgrade-notes

BigBang Version

Current