Announcing Istio 1.22.1

Istio 1.22.1 patch release.

Jun 4, 2024

This release implements the security updates described in our 4th of June post, ISTIO-SECURITY-2024-004 along with bug fixes to improve robustness.

This release note describes what’s different between Istio 1.22.0 and 1.22.1.

Things to know and prepare before upgrading.

Download and install this release.

Visit the documentation for this release.

Inspect the full set of source code changes.

Changes

Added a new, optional experimental admission policy that only allows stable features/fields to be used in Istio APIs when using a remote Istiod cluster. (Issue #173)
Fixed adding of pod IPs to the host’s ipset to explicitly fail instead of silently overwriting.
Fixed an issue causing outboundstatname in MeshConfig to not be honored for subset clusters.
Fixed custom injection of the istio-proxy container not working properly when SecurityContext.RunAs fields were set.
Fixed returning 503 errors by auto-passthrough gateways created after enabling mTLS.
Fixed serviceRegistry orders influence the proxy labels, so we put the Kubernetes registry in front. (Issue #50968)