Announcing Istio 1.11.2
Istio 1.11.2 patch release.
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.11.1 and Istio 1.11.2.
BEFORE YOU UPGRADE
Things to know and prepare before upgrading.
Download and install this release.
Visit the documentation for this release.
Inspect the full set of source code changes.
istioctl installto give more details during installation failures.
Added support for gRPC configuring workloads via xDS without an Envoy proxy.
Added two mutually-exclusive flags to
istioctl x workload entry configure
--internal-ipconfigures the VM workload with a private IP address used for workload auto registration and health probes.
--external-ipconfigures the VM workload with a public IP address used for workload auto registration. Meanwhile, it configures health probes to be performed through localhost by setting the environment variable
REWRITE_PROBE_LEGACY_LOCALHOST_DESTINATIONto true. (Issue #34411)
Added topology label
IstioEndpointif it does not exist in pod/workload label.
Added a configuration
FILE_DEBOUNCE_DURATIONthat allows users to configure the duration SDS server should wait after it sees first file change event. This is useful in File mounted certificate flows to ensure key and cert are fully written before they are pushed to Envoy. Default is
Fixed unexpected info logs for Istio when using command line tool
istioctl profile diffand
istioctl profile dump.
Fixed issue of deployment analyzer ignoring service namespaces during the analysis process.
DestinationRuleupdates not triggering an update for
AUTO_PASSTHROUGHlisteners on gateways. (Issue #34944)