Announcing Istio 1.11.3

Istio 1.11.3 patch release.

Sep 23, 2021

This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.11.2 and Istio 1.11.3

Things to know and prepare before upgrading.

Download and install this release.

Visit the documentation for this release.

Inspect the full set of source code changes.

Changes

Updated to allow specifying NICs that bypassing traffic capture in Istio iptables. (Issue #34753)
Added values to the Istio Gateway Helm charts for configuring annotations on the ServiceAccount. Can be used to enable IAM Roles for Service Accounts on AWS EKS.
Fixed istioctl analyze command to not output [IST0132] message when analyzing the gateway of the virtual service. (Issue #34653)
Fixed a bug using a Service’s pointer address to get its instances in the case where a sidecar’s egress listener has a port.
Fixed a bug in the “image: auto” analyzer causing it to fail to take into account the Deployment namespace. (Issue #34929)
Fixed istioctl x workload command output to set the correct discoveryAddress for revisioned control-planes. (Issue #34058)
Fixed gateway analyzer message reporting if there is no selector in the gateway spec. (Issue #35093)
Fixed an issue causing memory to not be freed after XDS clients disconnect.
Fixed an issue occurring when multiple VirtualServices with the same name exist in different namespaces. (Issue #35127)