From 134768c3dceea8fe5bf4e2915e8118a6534e3b8e Mon Sep 17 00:00:00 2001
From: Daniel Grimm <dgrimm@redhat.com>
Date: Wed, 8 Dec 2021 16:50:34 +0100
Subject: [PATCH] Add release notes for 1.12.1 (#10574)

---
 .../1.12.x/announcing-1.12.1/index.md         | 39 +++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 content/en/news/releases/1.12.x/announcing-1.12.1/index.md

diff --git a/content/en/news/releases/1.12.x/announcing-1.12.1/index.md b/content/en/news/releases/1.12.x/announcing-1.12.1/index.md
new file mode 100644
index 0000000000..7e21ce4a5b
--- /dev/null
+++ b/content/en/news/releases/1.12.x/announcing-1.12.1/index.md
@@ -0,0 +1,39 @@
+---
+title: Announcing Istio 1.12.1
+linktitle: 1.12.1
+subtitle: Patch Release
+description: Istio 1.12.1 patch release.
+publishdate: 2021-12-07
+release: 1.12.1
+aliases:
+    - /news/announcing-1.12.1
+---
+
+This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.12.0 and Istio 1.12.1
+
+{{< relnote >}}
+
+## Changes
+
+- **Added** istiod deployment respect `values.pilot.nodeSelector`.
+  ([Issue #36110](https://github.com/istio/istio/issues/36110))
+
+- **Added** an option to disable a number of nonstandard kubeconfig authentication methods when using multicluster secret by configuring the `PILOT_INSECURE_MULTICLUSTER_KUBECONFIG_OPTIONS` environment variable in Istiod. By default, this option is configured to allow all methods; future versions will restrict this by default.
+
+- **Fixed** the `--duration` flag never gets used in the `istioctl bug-report` command.
+
+- **Fixed** using flags in `istioctl bug-report` results in errors.
+  ([Issue #36103](https://github.com/istio/istio/issues/36103))
+
+- **Fixed** `DeploymentConfig`/`ReplicationController` workload name doesn't work correctly.
+
+- **Fixed** some control plane messages may be omitted in the bug-report.
+
+- **Fixed** webhook analyzer throwing nil pointer error when the `NamespaceSelector` field is empty.
+
+- **Fixed** workload name metric labels are not correctly populated for `CronJob` at k8s 1.21+.
+  ([Issue #35563](https://github.com/istio/istio/issues/35563))
+
+- **Fixed** an issue where `EnvoyFilter` with ANY patch context will skip adding new clusters and listeners at gateway.
+
+- **Fixed** an issue where `EnvoyFilter` patches on `virtualOutbound-blackhole` could cause memory leaks.