Announcing Istio 1.26.0
Istio 1.26 Release Announcement.
We are pleased to announce the release of Istio 1.26. Thank you to all our contributors, testers, users and enthusiasts for helping us get the 1.26.0 release published! We would like to thank the Release Managers for this release, Daniel Hawton from Solo.io, Faseela K from Ericsson Software Technology, and Gustavo Meira from Microsoft.
CHANGE NOTES
Get a detailed list of what's changed.
BEFORE YOU UPGRADE
Things to know and prepare before upgrading.
DOWNLOAD
Download and install this release.
DOCS
Visit the documentation for this release.
What’s new?
Customization of resources provisioned by the Gateway API
When you create a Gateway or a waypoint using the Gateway API, a Service and a Deployment are created automatically. It has been a common request to allow customization of these objects, and that is now supported in Istio 1.26 by specifying a ConfigMap of parameters. If configuration for a HorizontalPodAutoscaler or PodDisruptionBudget is provided, those resources will automatically be created also. Learn more about customizing the generated Gateway API resources.
New Gateway API support
TCPRoute is now available in waypoints, allowing TCP traffic shifting in ambient mode.
We also added support for the experimental BackendTLSPolicy and started the implementation of BackendTrafficPolicy in Gateway API 1.3, which will eventually set retry constraints.
Support for the new Kubernetes ClusterTrustBundle
We’ve added experimental support for the experimental ClusterTrustBundle resource in Kubernetes, allowing support for the new method of bundling a certificate and its root of trust into a single object.
Plus much, much more
istioctl analyzecan now run specific checks!- The CNI node agent no longer runs in the
hostNetworknamespace by default, reducing the chance of port conflicts with other services running on a host! - Required
ResourceQuotaresources andcniBinDirvalues are set automatically when installing on GKE! - An
EnvoyFiltercan now match aVirtualHoston a domain name!
Read about these and more in the full release notes.
Catch up with the Istio project
If you only check in with us when we have a new release, you might have missed that we published a security audit on ztunnel, we compared performance of ambient mode throughput vs. running in-kernel, or that we had a major presence at KubeCon EU. Check those posts out!
Upgrading to 1.26
We would like to hear from you regarding your experience upgrading to Istio 1.26. You can provide feedback in the #release-1.26 channel in our Slack workspace.
Would you like to contribute directly to Istio? Find and join one of our Working Groups and help us improve.