Automator: Update dependencies in istio-ecosystem/sail-operator@main (i…

…stio-ecosystem#482)

Signed-off-by: openshift-service-mesh-bot <[email protected]>

Makefile.core.mk

@@ -468,7 +468,7 @@ OPM ?= $(LOCALBIN)/opm
 ISTIOCTL ?= $(LOCALBIN)/istioctl
 
 ## Tool Versions
-OPERATOR_SDK_VERSION ?= v1.37.0
+OPERATOR_SDK_VERSION ?= v1.38.0
 HELM_VERSION ?= v3.16.3
 CONTROLLER_TOOLS_VERSION ?= v0.16.5
 OPM_VERSION ?= v1.48.0

bundle.Dockerfile

@@ -6,7 +6,7 @@ LABEL operators.operatorframework.io.bundle.manifests.v1=manifests/
 LABEL operators.operatorframework.io.bundle.metadata.v1=metadata/
 LABEL operators.operatorframework.io.bundle.package.v1=sailoperator
 LABEL operators.operatorframework.io.bundle.channels.v1="dev-0.2"
-LABEL operators.operatorframework.io.metrics.builder=operator-sdk-v1.37.0
+LABEL operators.operatorframework.io.metrics.builder=operator-sdk-v1.38.0
 LABEL operators.operatorframework.io.metrics.mediatype.v1=metrics+v1
 LABEL operators.operatorframework.io.metrics.project_layout=go.kubebuilder.io/v4
 

bundle/manifests/sailoperator.clusterserviceversion.yaml

@@ -34,7 +34,7 @@ metadata:
     capabilities: Seamless Upgrades
     categories: OpenShift Optional, Integration & Delivery, Networking, Security
     containerImage: quay.io/maistra-dev/sail-operator:0.2-latest
-    createdAt: "2024-11-19T05:05:04Z"
+    createdAt: "2024-11-20T05:05:08Z"
     description: Experimental operator for installing Istio service mesh
     features.operators.openshift.io/cnf: "false"
     features.operators.openshift.io/cni: "true"
@@ -46,7 +46,7 @@ metadata:
     features.operators.openshift.io/token-auth-aws: "false"
     features.operators.openshift.io/token-auth-azure: "false"
     features.operators.openshift.io/token-auth-gcp: "false"
-    operators.operatorframework.io/builder: operator-sdk-v1.37.0
+    operators.operatorframework.io/builder: operator-sdk-v1.38.0
     operators.operatorframework.io/internal-objects: '["wasmplugins.extensions.istio.io","destinationrules.networking.istio.io","envoyfilters.networking.istio.io","gateways.networking.istio.io","proxyconfigs.networking.istio.io","serviceentries.networking.istio.io","sidecars.networking.istio.io","virtualservices.networking.istio.io","workloadentries.networking.istio.io","workloadgroups.networking.istio.io","authorizationpolicies.security.istio.io","peerauthentications.security.istio.io","requestauthentications.security.istio.io","telemetries.telemetry.istio.io"]'
     operators.operatorframework.io/project_layout: go.kubebuilder.io/v4
     repository: https://github.com/istio-ecosystem/sail-operator
@@ -315,7 +315,7 @@ spec:
     - v1.22.6
     - v1.22.5
     - v1.21.6
-    - latest (a7394f41)
+    - latest (944617cd)
 
     [See this page](https://github.com/istio-ecosystem/sail-operator/blob/main/bundle/README.md) for instructions on how to use it.
   displayName: Sail Operator
@@ -539,10 +539,10 @@ spec:
           template:
             metadata:
               annotations:
-                images.latest.cni: gcr.io/istio-testing/install-cni:1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
-                images.latest.istiod: gcr.io/istio-testing/pilot:1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
-                images.latest.proxy: gcr.io/istio-testing/proxyv2:1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
-                images.latest.ztunnel: gcr.io/istio-testing/ztunnel:1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+                images.latest.cni: gcr.io/istio-testing/install-cni:1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
+                images.latest.istiod: gcr.io/istio-testing/pilot:1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
+                images.latest.proxy: gcr.io/istio-testing/proxyv2:1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
+                images.latest.ztunnel: gcr.io/istio-testing/ztunnel:1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
                 images.v1_21_6.cni: docker.io/istio/install-cni:1.21.6
                 images.v1_21_6.istiod: docker.io/istio/pilot:1.21.6
                 images.v1_21_6.proxy: docker.io/istio/proxyv2:1.21.6
@@ -719,13 +719,13 @@ spec:
   provider:
     name: Red Hat, Inc.
   relatedImages:
-  - image: gcr.io/istio-testing/install-cni:1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+  - image: gcr.io/istio-testing/install-cni:1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
     name: latest.cni
-  - image: gcr.io/istio-testing/pilot:1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+  - image: gcr.io/istio-testing/pilot:1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
     name: latest.istiod
-  - image: gcr.io/istio-testing/proxyv2:1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+  - image: gcr.io/istio-testing/proxyv2:1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
     name: latest.proxy
-  - image: gcr.io/istio-testing/ztunnel:1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+  - image: gcr.io/istio-testing/ztunnel:1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
     name: latest.ztunnel
   - image: docker.io/istio/install-cni:1.21.6
     name: v1_21_6.cni

bundle/metadata/annotations.yaml

@@ -5,7 +5,7 @@ annotations:
   operators.operatorframework.io.bundle.metadata.v1: metadata/
   operators.operatorframework.io.bundle.package.v1: sailoperator
   operators.operatorframework.io.bundle.channels.v1: "dev-0.2"
-  operators.operatorframework.io.metrics.builder: operator-sdk-v1.37.0
+  operators.operatorframework.io.metrics.builder: operator-sdk-v1.38.0
   operators.operatorframework.io.metrics.mediatype.v1: metrics+v1
   operators.operatorframework.io.metrics.project_layout: go.kubebuilder.io/v4
 

bundle/tests/scorecard/config.yaml

@@ -8,7 +8,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - basic-check-spec
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: basic
       test: basic-check-spec-test
@@ -18,7 +18,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-bundle-validation
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: olm
       test: olm-bundle-validation-test
@@ -28,7 +28,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-crds-have-validation
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: olm
       test: olm-crds-have-validation-test
@@ -38,7 +38,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-spec-descriptors
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: olm
       test: olm-spec-descriptors-test
@@ -48,7 +48,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-status-descriptors
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: olm
       test: olm-status-descriptors-test

chart/templates/olm/scorecard.yaml

@@ -9,7 +9,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - basic-check-spec
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: basic
       test: basic-check-spec-test
@@ -19,7 +19,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-bundle-validation
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: olm
       test: olm-bundle-validation-test
@@ -29,7 +29,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-crds-have-validation
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: olm
       test: olm-crds-have-validation-test
@@ -39,7 +39,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-spec-descriptors
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: olm
       test: olm-spec-descriptors-test
@@ -49,7 +49,7 @@ stages:
   - entrypoint:
     - scorecard-test
     - olm-status-descriptors
-    image: quay.io/operator-framework/scorecard-test:v1.37.0
+    image: quay.io/operator-framework/scorecard-test:v1.38.0
     labels:
       suite: olm
       test: olm-status-descriptors-test

chart/values.yaml

@@ -24,7 +24,7 @@ csv:
     - v1.22.6
     - v1.22.5
     - v1.21.6
-    - latest (a7394f41)
+    - latest (944617cd)
 
     [See this page](https://github.com/istio-ecosystem/sail-operator/blob/main/bundle/README.md) for instructions on how to use it.
   support: Community based

go.mod

@@ -25,8 +25,8 @@ require (
 	gomodules.xyz/jsonpatch/v2 v2.4.0
 	gopkg.in/yaml.v3 v3.0.1
 	helm.sh/helm/v3 v3.16.3
-	istio.io/client-go v1.24.0-alpha.0.0.20241114185735-ec09604bc205
-	istio.io/istio v0.0.0-20241119023857-a7394f412e7c
+	istio.io/client-go v1.24.0-alpha.0.0.20241119093757-67284b50ebaf
+	istio.io/istio v0.0.0-20241120001605-944617cd8991
 	k8s.io/api v0.31.2
 	k8s.io/apiextensions-apiserver v0.31.2
 	k8s.io/apimachinery v0.31.2
@@ -169,7 +169,7 @@ require (
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gotest.tools/v3 v3.5.1 // indirect
-	istio.io/api v1.24.0-alpha.0.0.20241113163033-dec7c6690854 // indirect
+	istio.io/api v1.24.0-alpha.0.0.20241119093358-f27f8e964442 // indirect
 	k8s.io/apiserver v0.31.2 // indirect
 	k8s.io/component-base v0.31.2 // indirect
 	k8s.io/klog/v2 v2.130.1 // indirect

go.sum

@@ -495,12 +495,12 @@ gotest.tools/v3 v3.5.1 h1:EENdUnS3pdur5nybKYIh2Vfgc8IUNBjxDPSjtiJcOzU=
 gotest.tools/v3 v3.5.1/go.mod h1:isy3WKz7GK6uNw/sbHzfKBLvlvXwUyV06n6brMxxopU=
 helm.sh/helm/v3 v3.16.3 h1:kb8bSxMeRJ+knsK/ovvlaVPfdis0X3/ZhYCSFRP+YmY=
 helm.sh/helm/v3 v3.16.3/go.mod h1:zeVWGDR4JJgiRbT3AnNsjYaX8OTJlIE9zC+Q7F7iUSU=
-istio.io/api v1.24.0-alpha.0.0.20241113163033-dec7c6690854 h1:FkMfRfEUFDrMwOxeDo1Kz/Z4FQ9cI8bcKGfrzeBJom4=
-istio.io/api v1.24.0-alpha.0.0.20241113163033-dec7c6690854/go.mod h1:MQnRok7RZ20/PE56v0LxmoWH0xVxnCQPNuf9O7PAN1I=
-istio.io/client-go v1.24.0-alpha.0.0.20241114185735-ec09604bc205 h1:6Knc3uurw+h4t74VTDyQGS7evBvFfTl2CBY7FzXcNR4=
-istio.io/client-go v1.24.0-alpha.0.0.20241114185735-ec09604bc205/go.mod h1:EqnhkJwrqoXY9EXS79aYKkNuhOgTqQHXVOmEw7EG+fI=
-istio.io/istio v0.0.0-20241119023857-a7394f412e7c h1:fFDa0N61Lxk8Oz+gFVCgC2CxRceKe6QJQbvlveXXvjA=
-istio.io/istio v0.0.0-20241119023857-a7394f412e7c/go.mod h1:Pdmaq78JpDNS0Sphz7L7LkZlSuvqi8kr8kzEsXM3PZU=
+istio.io/api v1.24.0-alpha.0.0.20241119093358-f27f8e964442 h1:D/xiBtMK4eyS4Xjhp8eGy1KZhpiGIePRvMpd8UHVRsI=
+istio.io/api v1.24.0-alpha.0.0.20241119093358-f27f8e964442/go.mod h1:MQnRok7RZ20/PE56v0LxmoWH0xVxnCQPNuf9O7PAN1I=
+istio.io/client-go v1.24.0-alpha.0.0.20241119093757-67284b50ebaf h1:o49zxbZNso4i133UYjuFp+xOg8LUirhNBFYd1kpr99I=
+istio.io/client-go v1.24.0-alpha.0.0.20241119093757-67284b50ebaf/go.mod h1:pqM8LKBe54lvudw5Eu8itc+rlWsIZUksrdYCBTPqang=
+istio.io/istio v0.0.0-20241120001605-944617cd8991 h1:hE7nvGJJj1v/byMG/EPOEWCAMH5h768lnXMBtGdYo/E=
+istio.io/istio v0.0.0-20241120001605-944617cd8991/go.mod h1:FtmeFzmXiB4F+TF1Jm/vCbmWhDQKX+Dp37LQhg2kXaM=
 k8s.io/api v0.31.2 h1:3wLBbL5Uom/8Zy98GRPXpJ254nEFpl+hwndmk9RwmL0=
 k8s.io/api v0.31.2/go.mod h1:bWmGvrGPssSK1ljmLzd3pwCQ9MgoTsRCuK35u6SygUk=
 k8s.io/apiextensions-apiserver v0.31.2 h1:W8EwUb8+WXBLu56ser5IudT2cOho0gAKeTOnywBLxd0=

resources/latest/charts/base/Chart.yaml

@@ -1,10 +1,10 @@
 apiVersion: v2
-appVersion: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+appVersion: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
 description: Helm chart for deploying Istio cluster resources and CRDs
 icon: https://istio.io/latest/favicons/android-192x192.png
 keywords:
 - istio
 name: base
 sources:
 - https://github.com/istio/istio
-version: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+version: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7

resources/latest/charts/cni/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+appVersion: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
 description: Helm chart for istio-cni components
 icon: https://istio.io/latest/favicons/android-192x192.png
 keywords:
@@ -8,4 +8,4 @@ keywords:
 name: cni
 sources:
 - https://github.com/istio/istio
-version: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+version: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7

resources/latest/charts/cni/templates/daemonset.yaml

@@ -41,6 +41,12 @@ spec:
         prometheus.io/scrape: 'true'
         prometheus.io/port: "15014"
         prometheus.io/path: '/metrics'
+        # Add AppArmor annotation
+        # This is required to avoid conflicts with AppArmor profiles which block certain
+        # privileged pod capabilities.
+        # Required for Kubernetes 1.29 which does not support setting appArmorProfile in the
+        # securityContext which is otherwise preferred.
+        container.apparmor.security.beta.kubernetes.io/install-cni: unconfined
         # Custom annotations
         {{- if .Values.podAnnotations }}
 {{ toYaml .Values.podAnnotations | indent 8 }}
@@ -107,8 +113,8 @@ spec:
               - NET_ADMIN
               # CAP_NET_RAW is required to allow iptables mutation of the `nat` table
               - NET_RAW
-              # CAP_SYS_PTRACE is required for repair mode to describe the pod's network namespace
-              # in ambient and repair mode.
+              # CAP_SYS_PTRACE is required for repair and ambient mode to describe
+              # the pod's network namespace.
               - SYS_PTRACE
               # CAP_SYS_ADMIN is required for both ambient and repair, in order to open
               # network namespaces in `/proc` to obtain descriptors for entering pod network

resources/latest/charts/cni/values.yaml

@@ -115,7 +115,7 @@ _internal_defaults_do_not_set:
     hub: gcr.io/istio-testing
 
     # Default tag for Istio images.
-    tag: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+    tag: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
 
     # Variant of the image to use.
     # Currently supported are: [debug, distroless]

resources/latest/charts/gateway/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+appVersion: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
 description: Helm chart for deploying Istio gateways
 icon: https://istio.io/latest/favicons/android-192x192.png
 keywords:
@@ -9,4 +9,4 @@ name: gateway
 sources:
 - https://github.com/istio/istio
 type: application
-version: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+version: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7

resources/latest/charts/istiod/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+appVersion: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
 description: Helm chart for istio control plane
 icon: https://istio.io/latest/favicons/android-192x192.png
 keywords:
@@ -9,4 +9,4 @@ keywords:
 name: istiod
 sources:
 - https://github.com/istio/istio
-version: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+version: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7

resources/latest/charts/istiod/values.yaml

@@ -242,7 +242,7 @@ _internal_defaults_do_not_set:
     # Dev builds from prow are on gcr.io
     hub: gcr.io/istio-testing
     # Default tag for Istio images.
-    tag: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+    tag: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
     # Variant of the image to use.
     # Currently supported are: [debug, distroless]
     variant: ""

resources/latest/charts/ztunnel/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+appVersion: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
 description: Helm chart for istio ztunnel components
 icon: https://istio.io/latest/favicons/android-192x192.png
 keywords:
@@ -8,4 +8,4 @@ keywords:
 name: ztunnel
 sources:
 - https://github.com/istio/istio
-version: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+version: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7

resources/latest/charts/ztunnel/values.yaml

@@ -4,7 +4,7 @@ _internal_defaults_do_not_set:
   # Hub to pull from. Image will be `Hub/Image:Tag-Variant`
   hub: gcr.io/istio-testing
   # Tag to pull from. Image will be `Hub/Image:Tag-Variant`
-  tag: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+  tag: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
   # Variant to pull. Options are "debug" or "distroless". Unset will use the default for the given version.
   variant: ""
 

versions.yaml

@@ -74,13 +74,13 @@ versions:
       - https://istio-release.storage.googleapis.com/charts/cni-1.21.6.tgz
       - https://istio-release.storage.googleapis.com/charts/ztunnel-1.21.6.tgz
   - name: latest
-    version: 1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+    version: 1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7
     repo: https://github.com/istio/istio
     branch: master
-    commit: a7394f412e7c4b6d06fdc97f7f4970ec99db3301
+    commit: 944617cd8991f46294da2de8c0117f426d3b3fb7
     charts:
-      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301/helm/base-1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301.tgz
-      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301/helm/cni-1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301.tgz
-      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301/helm/gateway-1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301.tgz
-      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301/helm/istiod-1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301.tgz
-      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301/helm/ztunnel-1.25-alpha.a7394f412e7c4b6d06fdc97f7f4970ec99db3301.tgz
+      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7/helm/base-1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7.tgz
+      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7/helm/cni-1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7.tgz
+      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7/helm/gateway-1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7.tgz
+      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7/helm/istiod-1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7.tgz
+      - https://storage.googleapis.com/istio-build/dev/1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7/helm/ztunnel-1.25-alpha.944617cd8991f46294da2de8c0117f426d3b3fb7.tgz