From 58ccaef15e172c84e0463ffe4289655de11d419c Mon Sep 17 00:00:00 2001 From: Istio Automation Date: Mon, 12 Sep 2022 14:00:53 -0700 Subject: [PATCH] [master] Release notes for Istio 1.14.4 (#11899) * Release noets for Istio 1.14.4 * Fix a lint error * Add a new release note entry * Update release date Co-authored-by: Lei Tang <32078630+lei-tang@users.noreply.github.com> --- .../1.14.x/announcing-1.14.4/index.md | 53 +++++++++++++++++++ 1 file changed, 53 insertions(+) create mode 100644 content/en/news/releases/1.14.x/announcing-1.14.4/index.md diff --git a/content/en/news/releases/1.14.x/announcing-1.14.4/index.md b/content/en/news/releases/1.14.x/announcing-1.14.4/index.md new file mode 100644 index 0000000000..26a38ca0cb --- /dev/null +++ b/content/en/news/releases/1.14.x/announcing-1.14.4/index.md @@ -0,0 +1,53 @@ +--- +title: Announcing Istio 1.14.4 +linktitle: 1.14.4 +subtitle: Patch Release +description: Istio 1.14.4 patch release. +publishdate: 2022-09-12 +release: 1.14.4 +--- + +This release contains bug fixes to improve robustness. +This release note describes what’s different between Istio 1.14.3 and Istio 1.14.4. + +{{< relnote >}} + +## Changes + +- **Added** support for `ALPN` negotiation to Istio [health checks](/docs/ops/configuration/mesh/app-health-check/), mirroring +how `Kubelet` functions. This allows `HTTPS` type probes to use `HTTP2`. To revert to the older behavior, +which always used `HTTP/1.1`, you can set the `ISTIO_ENABLE_HTTP2_PROBING=false` variable. + +- **Added** `PILOT_ENABLE_K8S_SELECT_WORKLOAD_ENTRIES` feature back to Istio which was removed in 1.14. +The feature will persist until the use case is clarified and a more permanent API is added. + +- **Fixed** the `%REQ_WITHOUT_QUERY(X?:Y):Z%` command operator, which should now work when using `JSON` encoding +for the log format. ([Issue #39271](https://github.com/istio/istio/issues/39271)) + +- **Fixed** an issue where Istio did not update the list of endpoints in `STRICT_DNS` clusters +during workload instance updates. ([Issue #39505](https://github.com/istio/istio/issues/39505)) + +- **Fixed** analyze `ConflictingMeshGatewayVirtualServiceHosts` (`IST0109`) message, +appearing when using `exportTo` to a specific namespace. ([Issue #39634](https://github.com/istio/istio/issues/39634)) + +- **Fixed** an issue where `istioctl analyze` started showing invalid warning messages. + +- **Fixed** `IST0103` warning from `istioctl analyze` for non-injected pods on the host network. + +- **Fixed** an issue when there is `Bind` specified in the Gateway with same hosts, +listeners are not generated correctly. ([Issue #40268](https://github.com/istio/istio/issues/40268)) + +- **Fixed** `istioctl install` to not show a warning message when `values.pilot.replicaCount` is set +to its default value. ([Issue #40246](https://github.com/istio/istio/issues/40246)) + +- **Fixed** an issue where a service, with and without Virtual Service timeouts specified, +is incorrectly setting the timeouts. ([Issue #40299](https://github.com/istio/istio/issues/40299)) + +- **Fixed** an issue preventing the Istio ingress/egress gateway from matching any nodes. ([Issue #40378](https://github.com/istio/istio/issues/40378)) + +- **Fixed** an issue where `ProxyConfig` overrides could unexpectedly apply to other workloads. + ([Issue #40445](https://github.com/istio/istio/issues/40445)) + +- **Fixed** an issue causing TLS `ServiceEntries` to sometimes not work when created after TCP ones. + +- **Fixed** potential memory leak when updating hostname of service entries.