Upgrade istio to v.1.23.2 (#2890)

Signed-off-by: Tarek Abouzeid <[email protected]>

.github/workflows/notebook_controller_m2m_test.yaml

@@ -34,7 +34,7 @@ jobs:
       run: ./tests/gh-actions/install_oauth2-proxy.sh
 
     - name: Install kubeflow-istio-resources
-      run: kustomize build common/istio-1-22/kubeflow-istio-resources/base | kubectl apply -f -
+      run: kustomize build common/istio-1-23/kubeflow-istio-resources/base | kubectl apply -f -
 
     - name: Install KF Multi Tenancy
       run: ./tests/gh-actions/install_multi_tenancy.sh

.github/workflows/pipeline_run_from_notebook.yaml

@@ -37,7 +37,7 @@ jobs:
       run: kustomize build common/kubeflow-namespace/base | kubectl apply -f -
 
     - name: Install kubeflow-istio-resources
-      run: kustomize build common/istio-1-22/kubeflow-istio-resources/base | kubectl apply -f -
+      run: kustomize build common/istio-1-23/kubeflow-istio-resources/base | kubectl apply -f -
 
     - name: Install KF Pipelines
       run: ./tests/gh-actions/install_pipelines.sh

.github/workflows/pipeline_swfs_test.yaml

@@ -45,7 +45,7 @@ jobs:
       run: ./tests/gh-actions/install_multi_tenancy.sh
 
     - name: Install kubeflow-istio-resources
-      run: kustomize build common/istio-1-22/kubeflow-istio-resources/base | kubectl apply -f -
+      run: kustomize build common/istio-1-23/kubeflow-istio-resources/base | kubectl apply -f -
 
     - name: Create KF Profile
       run: kustomize build common/user-namespace/base | kubectl apply -f -

.github/workflows/pipeline_test.yaml

@@ -44,7 +44,7 @@ jobs:
       run: ./tests/gh-actions/install_multi_tenancy.sh
 
     - name: Install kubeflow-istio-resources
-      run: kustomize build common/istio-1-22/kubeflow-istio-resources/base | kubectl apply -f -
+      run: kustomize build common/istio-1-23/kubeflow-istio-resources/base | kubectl apply -f -
 
     - name: Create KF Profile
       run: kustomize build common/user-namespace/base | kubectl apply -f -

.github/workflows/training_operator_test.yaml

@@ -38,7 +38,7 @@ jobs:
       run: ./tests/gh-actions/install_multi_tenancy.sh
 
     - name: Install kubeflow-istio-resources
-      run: kustomize build common/istio-1-22/kubeflow-istio-resources/base | kubectl apply -f -
+      run: kustomize build common/istio-1-23/kubeflow-istio-resources/base | kubectl apply -f -
 
     - name: Create KF Profile
       run: kustomize build common/user-namespace/base | kubectl apply -f -

README.md

@@ -64,7 +64,7 @@ used from the different projects of Kubeflow:
 
 | Component | Local Manifests Path | Upstream Revision |
 | - | - | - |
-| Istio | common/istio-1-22 | [1.22.1](https://github.com/istio/istio/releases/tag/1.22.1) |
+| Istio | common/istio-1-23 | [1.23.2](https://github.com/istio/istio/releases/tag/1.23.2) |
 | Knative | common/knative/knative-serving <br /> common/knative/knative-eventing | [v1.12.4](https://github.com/knative/serving/releases/tag/knative-v1.12.4) <br /> [v1.12.6](https://github.com/knative/eventing/releases/tag/knative-v1.12.6) |
 | Cert Manager | common/cert-manager | [1.14.5](https://github.com/cert-manager/cert-manager/releases/tag/v1.12.2) |
 
@@ -209,9 +209,9 @@ Install Istio:
 
 ```sh
 echo "Installing Istio configured with external authorization..."
-kustomize build common/istio-1-22/istio-crds/base | kubectl apply -f -
-kustomize build common/istio-1-22/istio-namespace/base | kubectl apply -f -
-kustomize build common/istio-1-22/istio-install/overlays/oauth2-proxy | kubectl apply -f -
+kustomize build common/istio-1-23/istio-crds/base | kubectl apply -f -
+kustomize build common/istio-1-23/istio-namespace/base | kubectl apply -f -
+kustomize build common/istio-1-23/istio-install/overlays/oauth2-proxy | kubectl apply -f -
 
 echo "Waiting for all Istio Pods to become ready..."
 kubectl wait --for=condition=Ready pods --all -n istio-system --timeout 300s
@@ -265,7 +265,7 @@ Install Knative Serving:
 
 ```sh
 kustomize build common/knative/knative-serving/overlays/gateways | kubectl apply -f -
-kustomize build common/istio-1-22/cluster-local-gateway/base | kubectl apply -f -
+kustomize build common/istio-1-23/cluster-local-gateway/base | kubectl apply -f -
 ```
 
 Optionally, you can install Knative Eventing which can be used for inference request logging:
@@ -312,7 +312,7 @@ Create the Kubeflow Gateway, `kubeflow-gateway` and ClusterRole,
 Install kubeflow istio resources:
 
 ```sh
-kustomize build common/istio-1-22/kubeflow-istio-resources/base | kubectl apply -f -
+kustomize build common/istio-1-23/kubeflow-istio-resources/base | kubectl apply -f -
 ```
 
 #### Kubeflow Pipelines

common/istio-1-22/cluster-local-gateway/base/cluster-local-gateway.yaml → common/istio-1-23/cluster-local-gateway/base/cluster-local-gateway.yaml

@@ -109,8 +109,7 @@ spec:
         - name: ISTIO_META_WORKLOAD_NAME
           value: cluster-local-gateway
         - name: ISTIO_META_OWNER
-          value: 
-            kubernetes://apis/apps/v1/namespaces/istio-system/deployments/cluster-local-gateway
+          value: kubernetes://apis/apps/v1/namespaces/istio-system/deployments/cluster-local-gateway
         - name: ISTIO_META_MESH_ID
           value: cluster.local
         - name: TRUST_DOMAIN
@@ -123,7 +122,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
-        image: docker.io/istio/proxyv2:1.22.1
+        image: docker.io/istio/proxyv2:1.23.2
         name: istio-proxy
         ports:
         - containerPort: 15020