Skip to content

Conversation

jewertow
Copy link
Member

@jewertow jewertow commented Sep 3, 2025

Description

The injection template for SPIRE does not work with Istio 1.27 that enables native sidecars by default.

Reviewers

  • Ambient
  • Docs
  • Installation
  • Networking
  • Performance and Scalability
  • Extensions and Telemetry
  • Security
  • Test and Release
  • User Experience
  • Developer Infrastructure
  • Localization/Translation

@jewertow jewertow requested a review from a team as a code owner September 3, 2025 11:05
@istio-testing istio-testing added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Sep 3, 2025
@jewertow jewertow requested a review from a team as a code owner September 3, 2025 11:39
@istio-testing istio-testing added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Sep 3, 2025
fi
export KIND_IP_FAMILY
export NODE_IMAGE="gcr.io/istio-testing/kind-node:v1.31.0"
export NODE_IMAGE=""
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why is this being changed?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Native sidecars are not enabled on KIND 1.31, so the integration tests for spire worked fine and didn't capture the issue with patching containers, instead of initContainers, so I upgraded the node image, but now other tests fail.

@jewertow jewertow force-pushed the spire-injection-template-init-containers branch from 9e0b007 to 4a3d257 Compare September 5, 2025 09:20
Signed-off-by: Jacek Ewertowski <[email protected]>
@jewertow
Copy link
Member Author

jewertow commented Sep 5, 2025

/retest

@istio-testing
Copy link
Contributor

@jewertow: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
doc.test.profile-demo_istio.io 4e550c5 link true /test doc.test.profile-demo
doc.test.profile-none_istio.io 4e550c5 link true /test doc.test.profile-none

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@jewertow
Copy link
Member Author

Closed in favor of #16866

@jewertow jewertow closed this Sep 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/environments size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants