Upgrade istio to v.1.28.0

README.md

@@ -73,7 +73,7 @@ This repository periodically synchronizes all official Kubeflow components from
 | Kubeflow Pipelines | applications/pipeline/upstream | [2.14.3](https://github.com/kubeflow/pipelines/tree/2.14.3/manifests/kustomize) | 970m | 3552Mi | 35GB |
 | Kubeflow Model Registry | applications/model-registry/upstream | [v0.3.3](https://github.com/kubeflow/model-registry/tree/v0.3.3/manifests/kustomize) | 510m | 2112Mi | 20GB |
 | Spark Operator	|	applications/spark/spark-operator	|	[2.3.0](https://github.com/kubeflow/spark-operator/tree/v2.3.0) | 9m | 41Mi | 0GB |
-| Istio | common/istio | [1.27.0](https://github.com/istio/istio/releases/tag/1.27.0) | 750m | 2364Mi | 0GB |
+| Istio | common/istio | [1.28.0](https://github.com/istio/istio/releases/tag/1.28.0) | 750m | 2364Mi | 0GB |
 | Knative | common/knative/knative-serving <br /> common/knative/knative-eventing | [v1.16.2](https://github.com/knative/serving/releases/tag/knative-v1.16.2) <br /> [v1.16.4](https://github.com/knative/eventing/releases/tag/knative-v1.16.4) | 1450m | 1038Mi | 0GB |
 | Cert Manager | common/cert-manager | [1.16.1](https://github.com/cert-manager/cert-manager/releases/tag/v1.16.1) | 3m | 128Mi | 0GB |
 | Dex | common/dex | [2.43.1](https://github.com/dexidp/dex/releases/tag/v2.43.1) | 3m | 27Mi | 0GB |

common/istio/cluster-local-gateway/base/cluster-local-gateway.yaml

@@ -7,8 +7,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istio-ingressgateway
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.27.0
-    helm.sh/chart: istio-ingress-1.27.0
+    app.kubernetes.io/version: 1.28.0
+    helm.sh/chart: istio-ingress-1.28.0
     install.operator.istio.io/owning-resource: unknown
     istio: cluster-local-gateway
     istio.io/rev: default
@@ -26,8 +26,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istio-ingressgateway
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.27.0
-    helm.sh/chart: istio-ingress-1.27.0
+    app.kubernetes.io/version: 1.28.0
+    helm.sh/chart: istio-ingress-1.28.0
     install.operator.istio.io/owning-resource: unknown
     istio: cluster-local-gateway
     istio.io/dataplane-mode: none
@@ -59,9 +59,9 @@ spec:
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: istio-ingressgateway
         app.kubernetes.io/part-of: istio
-        app.kubernetes.io/version: 1.27.0
+        app.kubernetes.io/version: 1.28.0
         chart: gateways
-        helm.sh/chart: istio-ingress-1.27.0
+        helm.sh/chart: istio-ingress-1.28.0
         heritage: Tiller
         install.operator.istio.io/owning-resource: unknown
         istio: cluster-local-gateway
@@ -143,7 +143,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
-        image: gcr.io/istio-release/proxyv2:1.27.0
+        image: gcr.io/istio-release/proxyv2:1.28.0
         name: istio-proxy
         ports:
         - containerPort: 15020
@@ -251,31 +251,6 @@ spec:
           optional: true
           secretName: istio-ingressgateway-ca-certs
 ---
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  labels:
-    app: cluster-local-gateway
-    app.kubernetes.io/instance: istio
-    app.kubernetes.io/managed-by: Helm
-    app.kubernetes.io/name: istio-ingressgateway
-    app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.27.0
-    helm.sh/chart: istio-ingress-1.27.0
-    install.operator.istio.io/owning-resource: unknown
-    istio: cluster-local-gateway
-    istio.io/rev: default
-    operator.istio.io/component: IngressGateways
-    release: istio
-  name: cluster-local-gateway
-  namespace: istio-system
-spec:
-  minAvailable: 1
-  selector:
-    matchLabels:
-      app: cluster-local-gateway
-      istio: cluster-local-gateway
----
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
@@ -284,8 +259,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istio-ingressgateway
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.27.0
-    helm.sh/chart: istio-ingress-1.27.0
+    app.kubernetes.io/version: 1.28.0
+    helm.sh/chart: istio-ingress-1.28.0
     install.operator.istio.io/owning-resource: unknown
     istio.io/rev: default
     operator.istio.io/component: IngressGateways
@@ -310,8 +285,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istio-ingressgateway
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.27.0
-    helm.sh/chart: istio-ingress-1.27.0
+    app.kubernetes.io/version: 1.28.0
+    helm.sh/chart: istio-ingress-1.28.0
     install.operator.istio.io/owning-resource: unknown
     istio.io/rev: default
     operator.istio.io/component: IngressGateways
@@ -335,8 +310,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istio-ingressgateway
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.27.0
-    helm.sh/chart: istio-ingress-1.27.0
+    app.kubernetes.io/version: 1.28.0
+    helm.sh/chart: istio-ingress-1.28.0
     install.operator.istio.io/owning-resource: unknown
     istio: cluster-local-gateway
     istio.io/rev: default
@@ -369,8 +344,8 @@ metadata:
     app.kubernetes.io/managed-by: Helm
     app.kubernetes.io/name: istio-ingressgateway
     app.kubernetes.io/part-of: istio
-    app.kubernetes.io/version: 1.27.0
-    helm.sh/chart: istio-ingress-1.27.0
+    app.kubernetes.io/version: 1.28.0
+    helm.sh/chart: istio-ingress-1.28.0
     install.operator.istio.io/owning-resource: unknown
     istio: cluster-local-gateway
     istio.io/rev: default

common/istio/cluster-local-gateway/base/kustomization.yaml

@@ -9,5 +9,4 @@ resources:
 - gateway.yaml
 
 patches:
-- path: patches/remove-pdb.yaml
 - path: patches/seccomp-cluster-local-gateway.yaml