crds: deprecate old versions

This logs errors in Istiod, so we ought to upgrade there before we merge

networking/v1alpha3/destination_rule.proto

@@ -230,6 +230,7 @@ option go_package = "istio.io/api/networking/v1alpha3";
 // +cue-gen:DestinationRule:labels:app=istio-pilot,chart=istio,heritage=Tiller,release=istio
 // +cue-gen:DestinationRule:subresource:status
 // +cue-gen:DestinationRule:scope:Namespaced
+// +cue-gen:DestinationRule:deprecationReplacement:v1beta1
 // +cue-gen:DestinationRule:resource:categories=istio-io,networking-istio-io,shortNames=dr
 // +cue-gen:DestinationRule:printerColumn:name=Host,type=string,JSONPath=.spec.host,description="The name of a service from the service registry"
 // +cue-gen:DestinationRule:printerColumn:name=Age,type=date,JSONPath=.metadata.creationTimestamp,description="CreationTimestamp is a timestamp

networking/v1alpha3/gateway.proto

@@ -362,6 +362,7 @@ option go_package = "istio.io/api/networking/v1alpha3";
 // +cue-gen:Gateway:labels:app=istio-pilot,chart=istio,heritage=Tiller,release=istio
 // +cue-gen:Gateway:subresource:status
 // +cue-gen:Gateway:scope:Namespaced
+// +cue-gen:Gateway:deprecationReplacement:v1beta1
 // +cue-gen:Gateway:resource:categories=istio-io,networking-istio-io,shortNames=gw
 // +cue-gen:Gateway:preserveUnknownFields:false
 // -->

networking/v1alpha3/service_entry.proto

@@ -781,6 +781,7 @@ option go_package = "istio.io/api/networking/v1alpha3";
 // +cue-gen:ServiceEntry:labels:app=istio-pilot,chart=istio,heritage=Tiller,release=istio
 // +cue-gen:ServiceEntry:subresource:status
 // +cue-gen:ServiceEntry:scope:Namespaced
+// +cue-gen:ServiceEntry:deprecationReplacement:v1beta1
 // +cue-gen:ServiceEntry:resource:categories=istio-io,networking-istio-io,shortNames=se,plural=serviceentries
 // +cue-gen:ServiceEntry:printerColumn:name=Hosts,type=string,JSONPath=.spec.hosts,description="The hosts associated with the ServiceEntry"
 // +cue-gen:ServiceEntry:printerColumn:name=Location,type=string,JSONPath=.spec.location,description="Whether the service is external to the

networking/v1alpha3/sidecar.proto

@@ -572,6 +572,7 @@ option go_package = "istio.io/api/networking/v1alpha3";
 // +cue-gen:Sidecar:labels:app=istio-pilot,chart=istio,heritage=Tiller,release=istio
 // +cue-gen:Sidecar:subresource:status
 // +cue-gen:Sidecar:scope:Namespaced
+// +cue-gen:Sidecar:deprecationReplacement:v1beta1
 // +cue-gen:Sidecar:resource:categories=istio-io,networking-istio-io
 // +cue-gen:Sidecar:preserveUnknownFields:false
 // -->

networking/v1alpha3/virtual_service.proto

@@ -185,6 +185,7 @@ option go_package = "istio.io/api/networking/v1alpha3";
 // +cue-gen:VirtualService:labels:app=istio-pilot,chart=istio,heritage=Tiller,release=istio
 // +cue-gen:VirtualService:subresource:status
 // +cue-gen:VirtualService:scope:Namespaced
+// +cue-gen:VirtualService:deprecationReplacement:v1beta1
 // +cue-gen:VirtualService:resource:categories=istio-io,networking-istio-io,shortNames=vs
 // +cue-gen:VirtualService:printerColumn:name=Gateways,type=string,JSONPath=.spec.gateways,description="The names of gateways and sidecars
 // that should apply these routes"

networking/v1alpha3/workload_entry.proto

@@ -278,6 +278,7 @@ option go_package = "istio.io/api/networking/v1alpha3";
 // +cue-gen:WorkloadEntry:labels:app=istio-pilot,chart=istio,heritage=Tiller,release=istio
 // +cue-gen:WorkloadEntry:subresource:status
 // +cue-gen:WorkloadEntry:scope:Namespaced
+// +cue-gen:WorkloadEntry:deprecationReplacement:v1beta1
 // +cue-gen:WorkloadEntry:resource:categories=istio-io,networking-istio-io,shortNames=we,plural=workloadentries
 // +cue-gen:WorkloadEntry:printerColumn:name=Age,type=date,JSONPath=.metadata.creationTimestamp,description="CreationTimestamp is a timestamp
 // representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations.

networking/v1alpha3/workload_group.proto

@@ -124,6 +124,7 @@ option go_package = "istio.io/api/networking/v1alpha3";
 // +cue-gen:WorkloadGroup:labels:app=istio-pilot,chart=istio,heritage=Tiller,release=istio
 // +cue-gen:WorkloadGroup:subresource:status
 // +cue-gen:WorkloadGroup:scope:Namespaced
+// +cue-gen:WorkloadGroup:deprecationReplacement:v1beta1
 // +cue-gen:WorkloadGroup:resource:categories=istio-io,networking-istio-io,shortNames=wg,plural=workloadgroups
 // +cue-gen:WorkloadGroup:printerColumn:name=Age,type=date,JSONPath=.metadata.creationTimestamp,description="CreationTimestamp is a timestamp
 // representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations.

security/v1beta1/authorization_policy.proto

@@ -451,6 +451,7 @@ option go_package="istio.io/api/security/v1beta1";
 // +cue-gen:AuthorizationPolicy:scope:Namespaced
 // +cue-gen:AuthorizationPolicy:resource:categories=istio-io,security-istio-io,shortNames=ap,plural=authorizationpolicies
 // +cue-gen:AuthorizationPolicy:preserveUnknownFields:false
+// +cue-gen:AuthorizationPolicy:deprecationReplacement:v1
 // +cue-gen:AuthorizationPolicy:printerColumn:name=Action,type=string,JSONPath=.spec.action,description="The operation to take."
 // +cue-gen:AuthorizationPolicy:printerColumn:name=Age,type=date,JSONPath=.metadata.creationTimestamp,description="CreationTimestamp is a timestamp
 // representing the server time when this object was created. It is not guaranteed to be set in happens-before order across separate operations.

security/v1beta1/request_authentication.proto

@@ -426,6 +426,7 @@ option go_package="istio.io/api/security/v1beta1";
 // +cue-gen:RequestAuthentication:labels:app=istio-pilot,chart=istio,istio=security,heritage=Tiller,release=istio
 // +cue-gen:RequestAuthentication:subresource:status
 // +cue-gen:RequestAuthentication:scope:Namespaced
+// +cue-gen:RequestAuthentication:deprecationReplacement:v1
 // +cue-gen:RequestAuthentication:resource:categories=istio-io,security-istio-io,shortNames=ra
 // +cue-gen:RequestAuthentication:preserveUnknownFields:false
 // -->