1.23.3 Release notes (#15834)

* 1.23.3 Release Notes

* Apply suggestions from code review

Co-authored-by: Daniel Hawton <daniel@hawton.org>

* changes from make gen

* Update Istio sha to more recent version to pick up httpbin fix

* Update istio sha to pick httpbin changes

* make gen, update go.mod

---------

Co-authored-by: Daniel Hawton <daniel@hawton.org>
Co-authored-by: Mike Morris <1149913+mikemorris@users.noreply.github.com>
This commit is contained in:
Sumit Vij 2024-11-01 09:45:04 -07:00 committed by GitHub
parent 7e032f5336
commit 2041038967
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
12 changed files with 70 additions and 47 deletions

View File

@ -29,5 +29,5 @@ ENDSNIP
ENDSNIP
! IFS=$'\n' read -r -d '' bpsnip_args_istio_full_version <<\ENDSNIP
1.23.2
1.23.3
ENDSNIP

View File

@ -27,6 +27,6 @@ istioctl tag list
! IFS=$'\n' read -r -d '' bpsnip_revision_tags_middle__1_out <<\ENDSNIP
TAG REVISION NAMESPACES
default 1-22-1 ...
prod-canary 1-23-2 ...
prod-canary 1-23-3 ...
prod-stable 1-22-1 ...
ENDSNIP

View File

@ -56,10 +56,10 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_show_components_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.2 1.23.2
istio-cni istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed cni-1.23.2 1.23.2
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.2 1.23.2
ztunnel istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ztunnel-1.23.2 1.23.2
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.3 1.23.3
istio-cni istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed cni-1.23.3 1.23.3
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.3 1.23.3
ztunnel istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ztunnel-1.23.3 1.23.3
ENDSNIP
snip_check_pods() {
@ -79,10 +79,10 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_uninstall_1_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.2 1.23.2
istio-cni istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed cni-1.23.2 1.23.2
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.2 1.23.2
ztunnel istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ztunnel-1.23.2 1.23.2
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.3 1.23.3
istio-cni istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed cni-1.23.3 1.23.3
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.3 1.23.3
ztunnel istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ztunnel-1.23.3 1.23.3
ENDSNIP
snip_delete_ingress() {

View File

@ -26,7 +26,7 @@ curl -L https://istio.io/downloadIstio | sh -
}
snip_download_istio_2() {
curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.23.2 TARGET_ARCH=x86_64 sh -
curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.23.3 TARGET_ARCH=x86_64 sh -
}
snip_download_istio_4() {

View File

@ -35,7 +35,7 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_installation_steps_4_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.2 1.23.2
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.3 1.23.3
ENDSNIP
snip_install_discovery() {
@ -48,8 +48,8 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_installation_steps_6_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.2 1.23.2
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.2 1.23.2
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.3 1.23.3
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.3 1.23.3
ENDSNIP
snip_installation_steps_7() {
@ -93,7 +93,7 @@ kubectl get deployments -n istio-system --output wide
! IFS=$'\n' read -r -d '' snip_installation_steps_8_out <<\ENDSNIP
NAME READY UP-TO-DATE AVAILABLE AGE CONTAINERS IMAGES SELECTOR
istiod 1/1 1 1 10m discovery docker.io/istio/pilot:1.23.2 istio=pilot
istiod 1/1 1 1 10m discovery docker.io/istio/pilot:1.23.3 istio=pilot
ENDSNIP
snip_install_ingressgateway() {
@ -107,8 +107,8 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_helm_ls_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.2 1.23.2
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.2 1.23.2
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.3 1.23.3
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.3 1.23.3
ENDSNIP
snip_delete_delete_gateway_charts() {

View File

@ -153,11 +153,11 @@ istio-system example-istiocontrolplane1-22-0 HEALTHY 11m
ENDSNIP
snip_canary_upgrade_init() {
istio-1.23.2/bin/istioctl operator init --revision 1-23-2
istio-1.23.3/bin/istioctl operator init --revision 1-23-3
}
snip_cat_operator_yaml() {
cat example-istiocontrolplane-1-23-2.yaml
cat example-istiocontrolplane-1-23-3.yaml
}
! IFS=$'\n' read -r -d '' snip_cat_operator_yaml_out <<\ENDSNIP
@ -165,9 +165,9 @@ apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
metadata:
namespace: istio-system
name: example-istiocontrolplane-1-23-2
name: example-istiocontrolplane-1-23-3
spec:
revision: 1-23-2
revision: 1-23-3
profile: default
ENDSNIP
@ -177,7 +177,7 @@ kubectl get pod -n istio-system -l app=istiod
! IFS=$'\n' read -r -d '' snip_get_pods_istio_system_out <<\ENDSNIP
NAME READY STATUS RESTARTS AGE
istiod-1-23-2-597475f4f6-bgtcz 1/1 Running 0 64s
istiod-1-23-3-597475f4f6-bgtcz 1/1 Running 0 64s
istiod-6ffcc65b96-bxzv5 1/1 Running 0 2m11s
ENDSNIP
@ -188,7 +188,7 @@ kubectl get services -n istio-system -l app=istiod
! IFS=$'\n' read -r -d '' snip_get_svc_istio_system_out <<\ENDSNIP
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
istiod ClusterIP 10.104.129.150 <none> 15010/TCP,15012/TCP,443/TCP,15014/TCP,853/TCP 2m35s
istiod-1-23-2 ClusterIP 10.111.17.49 <none> 15010/TCP,15012/TCP,443/TCP,15014/TCP 88s
istiod-1-23-3 ClusterIP 10.111.17.49 <none> 15010/TCP,15012/TCP,443/TCP,15014/TCP 88s
ENDSNIP
snip_delete_example_istiocontrolplane() {

View File

@ -99,12 +99,12 @@ istioctl proxy-status | grep "\.test-ns "
snip_usage_1() {
istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-22-1 --set profile=minimal --skip-confirmation
istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-23-2 --set profile=minimal --skip-confirmation
istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-23-3 --set profile=minimal --skip-confirmation
}
snip_usage_2() {
istioctl tag set prod-stable --revision 1-22-1
istioctl tag set prod-canary --revision 1-23-2
istioctl tag set prod-canary --revision 1-23-3
}
snip_usage_3() {
@ -128,13 +128,13 @@ istioctl ps
! IFS=$'\n' read -r -d '' snip_usage_5_out <<\ENDSNIP
NAME CLUSTER CDS LDS EDS RDS ECDS ISTIOD VERSION
sleep-78ff5975c6-62pzf.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-23-2-7f6fc6cfd6-s8zfg 1.23.2
sleep-78ff5975c6-62pzf.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-23-3-7f6fc6cfd6-s8zfg 1.23.3
sleep-78ff5975c6-8kxpl.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-22-1-bdf5948d5-n72r2 1.22.1
sleep-78ff5975c6-8q7m6.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-22-1-bdf5948d5-n72r2 1-22.1
ENDSNIP
snip_usage_6() {
istioctl tag set prod-stable --revision 1-23-2 --overwrite
istioctl tag set prod-stable --revision 1-23-3 --overwrite
}
snip_usage_7() {
@ -148,13 +148,13 @@ istioctl ps
! IFS=$'\n' read -r -d '' snip_usage_8_out <<\ENDSNIP
NAME CLUSTER CDS LDS EDS RDS ECDS ISTIOD VERSION
sleep-5984f48bc7-kmj6x.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-23-2-7f6fc6cfd6-jsktb 1.23.2
sleep-78ff5975c6-jldk4.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-23-2-7f6fc6cfd6-jsktb 1.23.2
sleep-7cdd8dccb9-5bq5n.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-23-2-7f6fc6cfd6-jsktb 1.23.2
sleep-5984f48bc7-kmj6x.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-23-3-7f6fc6cfd6-jsktb 1.23.3
sleep-78ff5975c6-jldk4.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-23-3-7f6fc6cfd6-jsktb 1.23.3
sleep-7cdd8dccb9-5bq5n.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-23-3-7f6fc6cfd6-jsktb 1.23.3
ENDSNIP
snip_default_tag_1() {
istioctl tag set default --revision 1-23-2
istioctl tag set default --revision 1-23-3
}
snip_uninstall_old_control_plane_1() {

View File

@ -78,15 +78,15 @@ helm upgrade istio-base istio/base --set defaultRevision=canary -n istio-system
snip_usage_1() {
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-22-1 -n istio-system | kubectl apply -f -
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-canary}" --set revision=1-23-2 -n istio-system | kubectl apply -f -
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-canary}" --set revision=1-23-3 -n istio-system | kubectl apply -f -
}
snip_usage_2() {
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-23-2 -n istio-system | kubectl apply -f -
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-23-3 -n istio-system | kubectl apply -f -
}
snip_default_tag_1() {
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{default}" --set revision=1-23-2 -n istio-system | kubectl apply -f -
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{default}" --set revision=1-23-3 -n istio-system | kubectl apply -f -
}
snip_in_place_upgrade_1() {

View File

@ -0,0 +1,23 @@
---
title: Announcing Istio 1.23.3
linktitle: 1.23.3
subtitle: Patch Release
description: Istio 1.23.3 patch release.
publishdate: 2024-10-24
release: 1.23.3
---
This release contains bug fixes to improve robustness. This release note describes whats different between Istio 1.23.2 and Istio 1.23.3
{{< relnote >}}
## Changes
- **Added** `clusterLocal` host exclusions for multi-cluster.
- **Added** the metrics port in the `DaemonSet` containers spec of the `istio-cni` chart.
- **Added** the metrics port in the `kube-gateway` container spec of the `istio-discovery` chart.
- **Fixed** `kube-virt-interfaces` rules not being removed by `istio-clean-iptables` tool.
([Issue #48368](https://github.com/istio/istio/issues/48368))

View File

@ -2,7 +2,7 @@
version: "1.23"
# The full Istio version identifier the docs describe
full_version: "1.23.2"
full_version: "1.23.3"
# The previous Istio version identifier the docs describe, used for upgrade documentation
previous_version: "1.22"

8
go.mod
View File

@ -13,7 +13,7 @@ replace github.com/imdario/mergo => github.com/imdario/mergo v0.3.5
require (
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
golang.org/x/sync v0.7.0
istio.io/istio v0.0.0-20240808223150-f8e9c97e7b62
istio.io/istio v0.0.0-20241031041049-6649dd8ed6b6
k8s.io/apimachinery v0.30.1
k8s.io/client-go v0.30.1
)
@ -41,7 +41,7 @@ require (
github.com/cyphar/filepath-securejoin v0.2.4 // indirect
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 // indirect
github.com/docker/cli v26.1.4+incompatible // indirect
github.com/docker/cli v26.1.5+incompatible // indirect
github.com/docker/distribution v2.8.3+incompatible // indirect
github.com/docker/docker v26.1.5+incompatible // indirect
github.com/docker/docker-credential-helpers v0.8.1 // indirect
@ -194,8 +194,8 @@ require (
gopkg.in/yaml.v2 v2.4.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
helm.sh/helm/v3 v3.15.1 // indirect
istio.io/api v1.23.0-rc.0.0.20240808171852-2bb3b8eba0c2 // indirect
istio.io/client-go v1.23.0-rc.0.0.20240808172151-69d119325620 // indirect
istio.io/api v1.23.3-0.20241007150425-eb56b2cffca7 // indirect
istio.io/client-go v1.23.3-0.20241007150824-1455e2e0ee0a // indirect
k8s.io/api v0.30.1 // indirect
k8s.io/apiextensions-apiserver v0.30.1 // indirect
k8s.io/apiserver v0.30.1 // indirect

16
go.sum
View File

@ -118,8 +118,8 @@ github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0 h1:8UrgZ3GkP4i/CLijOJx79Yu+etly
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.2.0/go.mod h1:v57UDF4pDQJcEfFUCRop3lJL149eHGSe9Jvczhzjo/0=
github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=
github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8PWV+bWy6jNmig1y/TA+kYO4g3RSRF0IAv0no=
github.com/docker/cli v26.1.4+incompatible h1:I8PHdc0MtxEADqYJZvhBrW9bo8gawKwwenxRM7/rLu8=
github.com/docker/cli v26.1.4+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
github.com/docker/cli v26.1.5+incompatible h1:NxXGSdz2N+Ibdaw330TDO3d/6/f7MvHuiMbuFaIQDTk=
github.com/docker/cli v26.1.5+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
github.com/docker/docker v0.7.3-0.20190327010347-be7ac8be2ae0/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
@ -929,12 +929,12 @@ helm.sh/helm/v3 v3.15.1/go.mod h1:fvfoRcB8UKRUV5jrIfOTaN/pG1TPhuqSb56fjYdTKXg=
honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
istio.io/api v1.23.0-rc.0.0.20240808171852-2bb3b8eba0c2 h1:0sf0blnF707QN6Q5agY8cPKya832XqL1WuaX6OG/7pk=
istio.io/api v1.23.0-rc.0.0.20240808171852-2bb3b8eba0c2/go.mod h1:QPSTGXuIQdnZFEm3myf9NZ5uBMwCdJWUvfj9ZZ+2oBM=
istio.io/client-go v1.23.0-rc.0.0.20240808172151-69d119325620 h1:11QCpFWE1SdmYnBfS8KoggkJVCSA50EB5hKpU0qy/E8=
istio.io/client-go v1.23.0-rc.0.0.20240808172151-69d119325620/go.mod h1:3qX/KBS5aR47QV4JhphcZl5ysnZ53x78TBjNQLM2TC4=
istio.io/istio v0.0.0-20240808223150-f8e9c97e7b62 h1:Gqody7FhA/V8uoif2zYa0eVg97GDdKt85mRCJ3DSs1M=
istio.io/istio v0.0.0-20240808223150-f8e9c97e7b62/go.mod h1:v2YSyuJdAC3zWqhHVo/8a7ie0TUYYtxJ3imXkD2/kJU=
istio.io/api v1.23.3-0.20241007150425-eb56b2cffca7 h1:c8RwLi4qSqCn36t5B2WFkwRDY+qPZ1XhlLMEIoJDCcs=
istio.io/api v1.23.3-0.20241007150425-eb56b2cffca7/go.mod h1:QPSTGXuIQdnZFEm3myf9NZ5uBMwCdJWUvfj9ZZ+2oBM=
istio.io/client-go v1.23.3-0.20241007150824-1455e2e0ee0a h1:MZyree5xnOHalv93KgXLX9hb3EINj8EgLp7ztjWObos=
istio.io/client-go v1.23.3-0.20241007150824-1455e2e0ee0a/go.mod h1:Lfa3anzx7/kCOpcAciR+JiRMj/SYuzDcbXQDjkThnLg=
istio.io/istio v0.0.0-20241031041049-6649dd8ed6b6 h1:yBlKA+r0C/mjIGwGjpd7nYeKDcK+TXHhtKp5PeBlI4w=
istio.io/istio v0.0.0-20241031041049-6649dd8ed6b6/go.mod h1:JYpZ8e4FZlbg4eLSrxZ652PZ/kmrvLfbyHAXfOjIwLQ=
k8s.io/api v0.18.2/go.mod h1:SJCWI7OLzhZSvbY7U8zwNl9UA4o1fizoug34OV/2r78=
k8s.io/api v0.18.4/go.mod h1:lOIQAKYgai1+vz9J7YcDZwC26Z0zQewYOGWdyIPUUQ4=
k8s.io/api v0.30.1 h1:kCm/6mADMdbAxmIh0LBjS54nQBE+U4KmbCfIkF5CpJY=