Announcing Istio 1.22.4

Istio 1.22.4 patch release.

Aug 19, 2024

This release note describes what is different between Istio 1.22.3 and 1.22.4.

Things to know and prepare before upgrading.

Download and install this release.

Visit the documentation for this release.

Inspect the full set of source code changes.

Changes

Fixed an issue where the VirtualMachine WorkloadEntry locality label was missing during auto-registration. (Issue #51800)
Fixed an issue where listeners were missing for addresses beyond the first in a ServiceEntry. (Issue #51747)
Fixed inconsistent behavior with the istio_agent_cert_expiry_seconds metric.
Fixed the istiod chart installation for older Helm versions (v3.6 and v3.7) by ensuring that .Values.profile is set to a string. (Issue #52016)
Fixed an omission in ztunnel helm charts which resulted in some Kubernetes resources being created without labels.
Fixed handling of a a failure adding a pod to the dataplane where the pod was still added to ipset. (Issue #52218)
Fixed an issue causing resources to incorrectly be reported by istioctl proxy-status as STALE. (Issue #51612)
Fixed an issue that can trigger a deadlock when discoverySelectors (configured in MeshConfig) and a namespace, which has an Ingress object or a Kubernetes Gateway object, would move from being selected to unselected.
Fixed an issue causing stale endpoints when the same IP address was present in multiple WorkloadEntries.
Removed writing the experimental field GatewayClass.status.supportedFeatures, as it was unstable in the API.