Announcing Istio 1.12.1

Istio 1.12.1 patch release.

Dec 7, 2021

This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.12.0 and Istio 1.12.1

Things to know and prepare before upgrading.

Download and install this release.

Visit the documentation for this release.

Inspect the full set of source code changes.

Changes

Added istiod deployment respect values.pilot.nodeSelector. (Issue #36110)
Added an option to disable a number of nonstandard kubeconfig authentication methods when using multicluster secret by configuring the PILOT_INSECURE_MULTICLUSTER_KUBECONFIG_OPTIONS environment variable in Istiod. By default, this option is configured to allow all methods; future versions will restrict this by default.
Fixed the --duration flag never gets used in the istioctl bug-report command.
Fixed using flags in istioctl bug-report results in errors. (Issue #36103)
Fixed DeploymentConfig/ReplicationController workload name doesn’t work correctly.
Fixed some control plane messages may be omitted in the bug-report.
Fixed webhook analyzer throwing nil pointer error when the NamespaceSelector field is empty.
Fixed workload name metric labels are not correctly populated for CronJob at k8s 1.21+. (Issue #35563)
Fixed an issue where EnvoyFilter with ANY patch context will skip adding new clusters and listeners at gateway.
Fixed an issue where EnvoyFilter patches on virtualOutbound-blackhole could cause memory leaks.