Announcing Istio 1.21.4

Istio 1.21.4 patch release.

Jun 27, 2024

This release implements the security updates described in our 27th of June post, ISTIO-SECURITY-2024-005 along with bug fixes to improve robustness.

This release note describes what is different between Istio 1.21.3 and 1.21.4.

BEFORE YOU UPGRADE

Things to know and prepare before upgrading.

DOWNLOAD

Download and install this release.

DOCS

Visit the documentation for this release.

SOURCE CHANGES

Inspect the full set of source code changes.

Changes

Added gateways.securityContext to manifests to provide an option to customize the gateway securityContext. (Issue #49549)
Fixed an issue where istioctl analyze returned IST0162 false positives. (Issue #51257)
Fixed false positives in IST0128 and IST0129 when credentialName and workloadSelector were set. (Issue #51567)
Fixed an issue where JWKS fetched from URIs were not updated promptly when there are errors fetching other URIs. (Issue #51636)
Fixed 503 errors returned by auto-passthrough gateways created after enabling mTLS.
Fixed serviceRegistry ordering of the proxy labels, so we put the Kubernetes registry in front. (Issue #50968)