From 5baf8c20e00cd6cee7698058c82566be435c29ff Mon Sep 17 00:00:00 2001 From: jacob-delgado Date: Wed, 9 Sep 2020 12:15:21 -0600 Subject: [PATCH] Istio 1.6.9 release notes (#8098) * Istio 1.6.0 release notes * Fix linting issues * Linting issue * Fix linting issues * Sort grouping of changes * Review comments --- .../releases/1.6.x/announcing-1.6.9/index.md | 41 +++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 content/en/news/releases/1.6.x/announcing-1.6.9/index.md diff --git a/content/en/news/releases/1.6.x/announcing-1.6.9/index.md b/content/en/news/releases/1.6.x/announcing-1.6.9/index.md new file mode 100644 index 0000000000..5b3272b786 --- /dev/null +++ b/content/en/news/releases/1.6.x/announcing-1.6.9/index.md @@ -0,0 +1,41 @@ +--- +title: Announcing Istio 1.6.9 +linktitle: 1.6.9 +subtitle: Patch Release +description: Istio 1.6.9 patch release. +publishdate: 2020-09-09 +release: 1.6.9 +aliases: + - /news/announcing-1.6.9 +--- + +This release contains bug fixes to improve robustness. This release note describes +what’s different between Istio 1.6.8 and Istio 1.6.9. + +{{< relnote >}} + +## Changes + +- **Added** istioctl analyzer to detect when Destination Rules do not specify `caCertificates` ([Istio #25652](https://github.com/istio/istio/issues/25652)) +- **Added** missing `telemetry.loadshedding.*` options to mixer container arguments +- **Fixed** HTTP match request without headers conflict +- **Fixed** Istio operator to watch multiple namespaces ([Istio #26317](https://github.com/istio/istio/issues/26317)) +- **Fixed** `EDS` cache when an endpoint appears after its service resource ([Istio #26983](https://github.com/istio/istio/issues/26983)) +- **Fixed** `istioctl remove-from-mesh` not removing init containers on CNI installations. +- **Fixed** `istioctl` `add-to-mesh` and `remove-from-mesh` commands from affecting `OwnerReferences` ([Istio #26720](https://github.com/istio/istio/issues/26720)) +- **Fixed** cleaning up of service information when the cluster secret is deleted +- **Fixed** egress gateway ports binding to 80/443 due to user permissions +- **Fixed** gateway listeners created with traffic direction outbound to be drained properly on exit +- **Fixed** headless services not updating listeners ([Istio #26617](https://github.com/istio/istio/issues/26617)) +- **Fixed** inaccurate `endpointsPendingPodUpdate` metric +- **Fixed** ingress SDS from not getting secret update ([Istio #18912](https://github.com/istio/istio/issues/18912)) +- **Fixed** ledger capacity size +- **Fixed** operator to update service monitor due to invalid permissions ([Istio #26961](https://github.com/istio/istio/issues/26961)) +- **Fixed** regression in gateway name resolution ([Istio 26264](https://github.com/istio/istio/issues/26264)) +- **Fixed** rotated certificates not being stored to `/etc/istio-certs` `VolumeMount` ([Istio #26821](https://github.com/istio/istio/issues/26821)) +- **Fixed** trust domain validation in transport socket level ([Istio #26435](https://github.com/istio/istio/issues/26435)) +- **Improved** specifying network for a cluster without `meshNetworks` also being configured +- **Improved** the cache readiness state with TTL ([Istio #26418](https://github.com/istio/istio/issues/26418)) +- **Updated** SDS timeout to fetch workload certificates to `0s` +- **Updated** `app_containers` to use comma separated values for container specification +- **Updated** default protocol sniffing timeout to `5s` ([Istio #24379](https://github.com/istio/istio/issues/24379))