Announcing Istio 1.23.1

Istio 1.23.1 patch release.

Sep 10, 2024

This release note describes what is different between Istio 1.23.0 and 1.23.1.

Things to know and prepare before upgrading.

Download and install this release.

Visit the documentation for this release.

Inspect the full set of source code changes.

Changes

Fixed an issue where controller-assigned IPs did not respect per-proxy DNS capture the same way that ephemeral auto-allocated IPs did. (Issue #52609)
Fixed an issue where waypoints required DNS proxy to be enabled in order to consume auto-allocated IPs. (Issue #52746)
Fixed an issue where the ISTIO_OUTPUT iptables chain was not removed with pilot-agent istio-clean-iptables command. (Issue #52835)
Fixed an issue causing any portLevelSettings to be ignored in DestinationRules for waypoints. (Issue #52532)
Removed writing kubeconfig to CNI net directory. (Issue #52315)
Removed CNI_NET_DIR from the istio-cni ConfigMap, as it now does nothing. (Issue #52315)
Removed a change in Istio 1.23.0 causing regressions for ServiceEntries with multiple addresses defined. Note: the reverted change did fix an issue around missing addresses (#51747), but introduce a new set of issues. The original issue can be worked around by creating a sidecar resource. (Issue #52944),(Issue #52847)