Migrate Istio images from DockerHub to GCR

[akagami-harsh]

Pull Request Template for Kubeflow Manifests

✏️ Summary of Changes

• Replaces DockerHub image references (docker.io/istio) with GCR equivalents (gcr.io/istio-release) for Istio 1.24 and Istio-cni 1.24
• Updates Istio manifests in common/istio-1-24/ and common/istio-cni-1-24/.

📦 Dependencies

List any dependencies or related PRs (e.g., "Depends on #123").

🐛 Related Issues

• part of Switch to GHCR due to docker.io pull rate limits #3010

✅ Contributor Checklist

• I have tested these changes with kustomize. See Installation Prerequisites.
• All commits are signed-off to satisfy the DCO check.

---

You can join the CNCF Slack and access our meetings at the Kubeflow Community website. Our channel on the CNCF Slack is here #kubeflow-platform.

[juliusvonkohout]

Thank you @akagami-harsh please also upgrade/cleanup the readmes for istio and istio-cni https://github.com/kubeflow/manifests/blob/master/common/istio-cni-1-24/README.md https://github.com/kubeflow/manifests/blob/master/common/istio-1-24/README.md with the changes and use/upgrade the scripts in /hack https://github.com/kubeflow/manifests/blob/master/hack/synchronize-istio-manifests.sh and https://github.com/kubeflow/manifests/blob/master/hack/synchronize-istio-cni-manifests.sh with the commit to upgrade to the latest 1.24.3 https://github.com/istio/istio/releases/tag/1.24.3 release.

COMMIT="1.24.3"
CURRENT_VERSION="1-24" 
NEW_VERSION="1-24" # Must be a release

[juliusvonkohout]

@akagami-harsh please also upgrade/cleanup the readmes for istio and istio-cni https://github.com/kubeflow/manifests/blob/master/common/istio-cni-1-24/README.md https://github.com/kubeflow/manifests/blob/master/common/istio-1-24/README.md with the changes. you can also simplify them

[akagami-harsh]

@akagami-harsh please also upgrade/cleanup the readmes for istio and istio-cni https://github.com/kubeflow/manifests/blob/master/common/istio-cni-1-24/README.md https://github.com/kubeflow/manifests/blob/master/common/istio-1-24/README.md with the changes. you can also simplify them

Yes, i am working on it

[juliusvonkohout]

Regarding image: busybox:1.28 we should use registry.k8s.io/busybox in the install.yaml. But this must somehow be configured in a persistent manner.

[juliusvonkohout]

I am wondering which change is failing the three tests and i think you have to re-run the script to build the install.yaml etc. with the native sidecars.

[akagami-harsh]

The patchs were causing CI issues, so used image transformation to update busybox image instead.

[juliusvonkohout]

I think you should also check #3035

[juliusvonkohout]

I will try to review and merge it this week.

[juliusvonkohout]

Actually i do not see how

      k8s:
        env:
        - name: ENABLE_NATIVE_SIDECARS
          value: "true"

has any effect. I cannot find the variable in the generated manifests.

apiVersion: apps/v1
kind: Deployment
metadata:
  name: istiod
  namespace: istio-system
spec:
  template:
    spec:
      containers:
      - env:
        - name: ENABLE_NATIVE_SIDECARS
          value: "true"
        name: discovery

should be the output

[juliusvonkohout]

fixes #2958

[juliusvonkohout]

Thank you for the PR

/lgtm
/approve

Remaining is #3015 and the rest of #2958

[google-oss-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: juliusvonkohout

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [juliusvonkohout]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment