Added support to set retry-policy on App Mesh routes

A retry policy enables clients to protect themselves from intermittent
network failures or server-side failures. With retry policy definition
user can control the retry logic used by Envoy proxies.

This change includes

1. Update aws-go-sdk v1.23.18
2. Update VirtualService CRD definition to capture retry-policy via
3. Update controller to reconcile retry-policy with App Mesh resource

deploy/all.yaml

@@ -312,6 +312,23 @@ spec:
                                   type: string
                                 weight:
                                   type: integer
+                      retryPolicy:
+                        type: object
+                        properties:
+                          perRetryTimeoutMillis:
+                            type: integer
+                          maxRetries:
+                            type: integer
+                          httpRetryEvents:
+                            type: array
+                            items:
+                              type: string
+                          tcpRetryEvents:
+                            type: array
+                            items:
+                              type: string
+                              enum:
+                                - 'connection-error'
                   tcp:
                     type: object
                     properties:

deploy/controller-deployment.yaml.template

@@ -1,9 +1,4 @@
 ---
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: appmesh-system
----
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -27,36 +22,4 @@ spec:
           image: ${AWS_ACCOUNT}.dkr.ecr.${AWS_REGION}.amazonaws.com/amazon/app-mesh-controller:latest
           imagePullPolicy: Always
           ports:
-            - containerPort: 10555
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: app-mesh-sa
-  namespace: appmesh-system
----
-kind: ClusterRole
-apiVersion: rbac.authorization.k8s.io/v1beta1
-metadata:
-  name: app-mesh-controller
-rules:
-  - apiGroups: [""]
-    resources: ["pods"]
-    verbs: ["*"]
-  - apiGroups: ["appmesh.k8s.aws"]
-    resources: ["meshes", "virtualnodes", "virtualservices", "meshes/status", "virtualnodes/status", "virtualservices/status"]
-    verbs: ["*"]
----
-kind: ClusterRoleBinding
-apiVersion: rbac.authorization.k8s.io/v1beta1
-metadata:
-  name: app-mesh-controller-binding
-subjects:
-  - kind: ServiceAccount
-    name: app-mesh-sa
-    namespace: appmesh-system
-    apiGroup: ""
-roleRef:
-  kind: ClusterRole
-  name: app-mesh-controller
-  apiGroup: ""
+            - containerPort: 10555