chore(deps): update istio to v1.27.3 (defenseunicorns#2017)

renovate[bot] · web-flow · commit cc07063c79b6 · 2025-10-27T08:49:48.000-06:00
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [base](https://redirect.github.com/istio/istio) | patch | `1.27.1` -> `1.27.3` | | [cni](https://redirect.github.com/istio/istio) | patch | `1.27.1` -> `1.27.3` | | docker.io/istio/install-cni | patch | `1.27.1-distroless` -> `1.27.3-distroless` | | docker.io/istio/pilot | patch | `1.27.1-distroless` -> `1.27.3-distroless` | | docker.io/istio/proxyv2 | patch | `1.27.1-distroless` -> `1.27.3-distroless` | | docker.io/istio/ztunnel | patch | `1.27.1-distroless` -> `1.27.3-distroless` | | [gateway](https://redirect.github.com/istio/istio) | patch | `1.27.1` -> `1.27.3` | | [istiod](https://redirect.github.com/istio/istio) | patch | `1.27.1` -> `1.27.3` | | [quay.io/rfcurated/istio/install-cni](https://redirect.github.com/istio/cni) | patch | `1.27.1-jammy-fips-rfcurated-rfhardened` -> `1.27.3-jammy-fips-rfcurated-rfhardened` | | [quay.io/rfcurated/istio/pilot](https://redirect.github.com/istio/pilot) | patch | `1.27.1-jammy-fips-rfcurated-rfhardened` -> `1.27.3-jammy-fips-rfcurated-rfhardened` | | [quay.io/rfcurated/istio/proxyv2](https://redirect.github.com/istio/pilot) | patch | `1.27.1-jammy-fips-rfcurated-rfhardened` -> `1.27.3-jammy-fips-rfcurated-rfhardened` | | [quay.io/rfcurated/istio/ztunnel](https://redirect.github.com/istio/ztunnel) | patch | `1.27.1-jammy-scratch-fips-rfcurated` -> `1.27.3-jammy-scratch-fips-rfcurated` | | [registry1.dso.mil/ironbank/tetrate/istio/install-cni](https://cloudsmith.io/~tetrate/repos/getistio-containers/packages/detail/docker/install-cni) ([source](https://repo1.dso.mil/dsop/tetrate/istio/1.27/install-cni)) | patch | `1.27.1-fips` -> `1.27.3-fips` | | [registry1.dso.mil/ironbank/tetrate/istio/pilot](https://cloudsmith.io/~tetrate/repos/getistio-containers/packages/detail/docker/pilot) ([source](https://repo1.dso.mil/dsop/tetrate/istio/1.27/pilot)) | patch | `1.27.1-fips` -> `1.27.3-fips` | | [registry1.dso.mil/ironbank/tetrate/istio/proxyv2](https://cloudsmith.io/~tetrate/repos/getistio-containers/packages/detail/docker/proxyv2) ([source](https://repo1.dso.mil/dsop/tetrate/istio/1.27/proxyv2)) | patch | `1.27.1-fips` -> `1.27.3-fips` | | [registry1.dso.mil/ironbank/tetrate/istio/ztunnel](https://cloudsmith.io/~tetrate/repos/getistio-containers/packages/detail/docker/ztunnel) ([source](https://repo1.dso.mil/dsop/tetrate/istio/1.27/ztunnel)) | patch | `1.27.1-fips` -> `1.27.3-fips` | | [ztunnel](https://redirect.github.com/istio/istio) | patch | `1.27.1` -> `1.27.3` | --- ### Release Notes <details> <summary>istio/istio (base)</summary> ### [`v1.27.3`](https://redirect.github.com/istio/istio/releases/tag/1.27.3): Istio 1.27.3 [Compare Source](https://redirect.github.com/istio/istio/compare/1.27.2...1.27.3) [Artifacts](http://gcsweb.istio.io/gcs/istio-release/releases/1.27.3/) [Release Notes](https://istio.io/news/releases/1.27.x/announcing-1.27.3/) ### [`v1.27.2`](https://redirect.github.com/istio/istio/releases/tag/1.27.2): Istio 1.27.2 [Compare Source](https://redirect.github.com/istio/istio/compare/1.27.1...1.27.2) [Artifacts](http://gcsweb.istio.io/gcs/istio-release/releases/1.27.2/) [Release Notes](https://istio.io/news/releases/1.27.x/announcing-1.27.2/) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/src/istio/common/zarf.yaml b/src/istio/common/zarf.yaml
@@ -20,11 +20,11 @@ components:
     charts:
       - name: base
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.27.1
+        version: 1.27.3
         namespace: istio-system
       - name: istiod
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.27.1
+        version: 1.27.3
         namespace: istio-system
         valuesFiles:
           - "../values/base-istiod.yaml"
@@ -43,13 +43,13 @@ components:
           - "chart/values.yaml"
       - name: cni
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.27.1
+        version: 1.27.3
         namespace: istio-system
         valuesFiles:
           - "../values/base-cni.yaml"
       - name: ztunnel
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.27.1
+        version: 1.27.3
         namespace: istio-system
         valuesFiles:
           - "../values/base-ztunnel.yaml"
diff --git a/src/istio/values/registry1/cni.yaml b/src/istio/values/registry1/cni.yaml
@@ -2,4 +2,4 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 cni:
-  image: registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.27.1-fips
+  image: registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.27.3-fips
diff --git a/src/istio/values/registry1/istiod.yaml b/src/istio/values/registry1/istiod.yaml
@@ -2,11 +2,11 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 pilot:
-  image: registry1.dso.mil/ironbank/tetrate/istio/pilot:1.27.1-fips
+  image: registry1.dso.mil/ironbank/tetrate/istio/pilot:1.27.3-fips
 global:
   proxy_init:
     # renovate: image=registry1.dso.mil/ironbank/tetrate/istio/proxyv2
-    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.27.1-fips"
+    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.27.3-fips"
   proxy:
     # renovate: image=registry1.dso.mil/ironbank/tetrate/istio/proxyv2
-    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.27.1-fips"
+    image: "###ZARF_REGISTRY###/ironbank/tetrate/istio/proxyv2:1.27.3-fips"
diff --git a/src/istio/values/registry1/ztunnel.yaml b/src/istio/values/registry1/ztunnel.yaml
@@ -1,4 +1,4 @@
 # Copyright 2024 Defense Unicorns
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
-image: registry1.dso.mil/ironbank/tetrate/istio/ztunnel:1.27.1-fips
+image: registry1.dso.mil/ironbank/tetrate/istio/ztunnel:1.27.3-fips
diff --git a/src/istio/values/unicorn/cni.yaml b/src/istio/values/unicorn/cni.yaml
@@ -2,4 +2,4 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 cni:
-  image: quay.io/rfcurated/istio/install-cni:1.27.1-jammy-fips-rfcurated-rfhardened
+  image: quay.io/rfcurated/istio/install-cni:1.27.3-jammy-fips-rfcurated-rfhardened
diff --git a/src/istio/values/unicorn/istiod.yaml b/src/istio/values/unicorn/istiod.yaml
@@ -2,11 +2,11 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 pilot:
-  image: "quay.io/rfcurated/istio/pilot:1.27.1-jammy-fips-rfcurated-rfhardened"
+  image: "quay.io/rfcurated/istio/pilot:1.27.3-jammy-fips-rfcurated-rfhardened"
 global:
   proxy_init:
     # renovate: image=quay.io/rfcurated/istio/proxyv2
-    image: "###ZARF_REGISTRY###/rfcurated/istio/proxyv2:1.27.1-jammy-fips-rfcurated-rfhardened"
+    image: "###ZARF_REGISTRY###/rfcurated/istio/proxyv2:1.27.3-jammy-fips-rfcurated-rfhardened"
   proxy:
     # renovate: image=quay.io/rfcurated/istio/proxyv2
-    image: "###ZARF_REGISTRY###/rfcurated/istio/proxyv2:1.27.1-jammy-fips-rfcurated-rfhardened"
+    image: "###ZARF_REGISTRY###/rfcurated/istio/proxyv2:1.27.3-jammy-fips-rfcurated-rfhardened"
diff --git a/src/istio/values/unicorn/ztunnel.yaml b/src/istio/values/unicorn/ztunnel.yaml
@@ -1,4 +1,4 @@
 # Copyright 2024 Defense Unicorns
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
-image: quay.io/rfcurated/istio/ztunnel:1.27.1-jammy-scratch-fips-rfcurated
+image: quay.io/rfcurated/istio/ztunnel:1.27.3-jammy-scratch-fips-rfcurated
diff --git a/src/istio/values/upstream/cni.yaml b/src/istio/values/upstream/cni.yaml
@@ -1,4 +1,4 @@
 # Copyright 2024 Defense Unicorns
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 cni:
- image: docker.io/istio/install-cni:1.27.1-distroless
+ image: docker.io/istio/install-cni:1.27.3-distroless
diff --git a/src/istio/values/upstream/istiod.yaml b/src/istio/values/upstream/istiod.yaml
@@ -2,11 +2,11 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 pilot:
-  image: "docker.io/istio/pilot:1.27.1-distroless"
+  image: "docker.io/istio/pilot:1.27.3-distroless"
 global:
   proxy_init:
     # renovate: image=docker.io/istio/proxyv2
-    image: "###ZARF_REGISTRY###/istio/proxyv2:1.27.1-distroless"
+    image: "###ZARF_REGISTRY###/istio/proxyv2:1.27.3-distroless"
   proxy:
     # renovate: image=docker.io/istio/proxyv2
-    image: "###ZARF_REGISTRY###/istio/proxyv2:1.27.1-distroless"
+    image: "###ZARF_REGISTRY###/istio/proxyv2:1.27.3-distroless"
diff --git a/src/istio/values/upstream/ztunnel.yaml b/src/istio/values/upstream/ztunnel.yaml
@@ -1,4 +1,4 @@
 # Copyright 2024 Defense Unicorns
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
-image: docker.io/istio/ztunnel:1.27.1-distroless
+image: docker.io/istio/ztunnel:1.27.3-distroless
diff --git a/src/istio/zarf.yaml b/src/istio/zarf.yaml
@@ -33,10 +33,10 @@ components:
         valuesFiles:
           - "values/upstream/ztunnel.yaml"
     images:
-      - "docker.io/istio/pilot:1.27.1-distroless"
-      - "docker.io/istio/proxyv2:1.27.1-distroless"
-      - "docker.io/istio/install-cni:1.27.1-distroless"
-      - "docker.io/istio/ztunnel:1.27.1-distroless"
+      - "docker.io/istio/pilot:1.27.3-distroless"
+      - "docker.io/istio/proxyv2:1.27.3-distroless"
+      - "docker.io/istio/install-cni:1.27.3-distroless"
+      - "docker.io/istio/ztunnel:1.27.3-distroless"
 
   - name: istio-controlplane
     required: true
@@ -55,10 +55,10 @@ components:
         valuesFiles:
           - "values/registry1/ztunnel.yaml"
     images:
-      - registry1.dso.mil/ironbank/tetrate/istio/proxyv2:1.27.1-fips
-      - registry1.dso.mil/ironbank/tetrate/istio/pilot:1.27.1-fips
-      - registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.27.1-fips
-      - registry1.dso.mil/ironbank/tetrate/istio/ztunnel:1.27.1-fips
+      - registry1.dso.mil/ironbank/tetrate/istio/proxyv2:1.27.3-fips
+      - registry1.dso.mil/ironbank/tetrate/istio/pilot:1.27.3-fips
+      - registry1.dso.mil/ironbank/tetrate/istio/install-cni:1.27.3-fips
+      - registry1.dso.mil/ironbank/tetrate/istio/ztunnel:1.27.3-fips
 
   - name: istio-controlplane
     required: true
@@ -77,10 +77,10 @@ components:
         valuesFiles:
           - "values/unicorn/ztunnel.yaml"
     images:
-      - quay.io/rfcurated/istio/pilot:1.27.1-jammy-fips-rfcurated-rfhardened
-      - quay.io/rfcurated/istio/proxyv2:1.27.1-jammy-fips-rfcurated-rfhardened
-      - quay.io/rfcurated/istio/install-cni:1.27.1-jammy-fips-rfcurated-rfhardened
-      - quay.io/rfcurated/istio/ztunnel:1.27.1-jammy-scratch-fips-rfcurated
+      - quay.io/rfcurated/istio/pilot:1.27.3-jammy-fips-rfcurated-rfhardened
+      - quay.io/rfcurated/istio/proxyv2:1.27.3-jammy-fips-rfcurated-rfhardened
+      - quay.io/rfcurated/istio/install-cni:1.27.3-jammy-fips-rfcurated-rfhardened
+      - quay.io/rfcurated/istio/ztunnel:1.27.3-jammy-scratch-fips-rfcurated
 
   - name: gateway-api-crds
     required: true
@@ -92,7 +92,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.27.1
+        version: 1.27.3
         releaseName: admin-ingressgateway
         namespace: istio-admin-gateway
       - name: uds-istio-config
@@ -107,7 +107,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.27.1
+        version: 1.27.3
         releaseName: tenant-ingressgateway
         namespace: istio-tenant-gateway
       - name: uds-istio-config
@@ -122,7 +122,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.27.1
+        version: 1.27.3
         releaseName: passthrough-ingressgateway
         namespace: istio-passthrough-gateway
       - name: uds-istio-config
@@ -145,7 +145,7 @@ components:
     charts:
       - name: gateway
         url: https://istio-release.storage.googleapis.com/charts
-        version: 1.27.1
+        version: 1.27.3
         releaseName: egressgateway
         namespace: istio-egress-gateway
         valuesFiles:
