From 9b3e9444a226e5d6d67e79c085c5d5aee321a6dd Mon Sep 17 00:00:00 2001
From: Joshua Blatt <jblatt@google.com>
Date: Fri, 24 May 2019 06:59:55 -0700
Subject: [PATCH] 1.1.7 release notes (#4165) (#4215)

---
 content/about/notes/1.1.7/index.md          | 10 ++++++++++
 content/blog/2019/announcing-1.1.7/index.md | 11 +++++++++++
 content/boilerplates/notes/1.1.7.md         | 11 +++++++++++
 3 files changed, 32 insertions(+)
 create mode 100644 content/about/notes/1.1.7/index.md
 create mode 100644 content/blog/2019/announcing-1.1.7/index.md
 create mode 100644 content/boilerplates/notes/1.1.7.md

diff --git a/content/about/notes/1.1.7/index.md b/content/about/notes/1.1.7/index.md
new file mode 100644
index 0000000000..09bba8ab91
--- /dev/null
+++ b/content/about/notes/1.1.7/index.md
@@ -0,0 +1,10 @@
+---
+title: Istio 1.1.7
+publishdate: 2019-05-17
+icon: notes
+release: 1.1.7
+---
+
+This release includes several bug fixes and improvements to robustness.  This release note describes what's different between Istio 1.1.6 and Istio 1.1.7.
+
+{{< relnote >}}
diff --git a/content/blog/2019/announcing-1.1.7/index.md b/content/blog/2019/announcing-1.1.7/index.md
new file mode 100644
index 0000000000..268a1d28d8
--- /dev/null
+++ b/content/blog/2019/announcing-1.1.7/index.md
@@ -0,0 +1,11 @@
+---
+title: Announcing Istio 1.1.7
+description: Istio 1.1.7 patch release.
+publishdate: 2019-05-17
+attribution: The Istio Team
+release: 1.1.7
+---
+
+We're pleased to announce the availability of Istio 1.1.7. Please see below for what's changed.
+
+{{< relnote >}}
diff --git a/content/boilerplates/notes/1.1.7.md b/content/boilerplates/notes/1.1.7.md
new file mode 100644
index 0000000000..ceff7804b8
--- /dev/null
+++ b/content/boilerplates/notes/1.1.7.md
@@ -0,0 +1,11 @@
+## Bug fixes
+
+- Fix issue where two gateways with overlapping hosts, created at the same second, can cause Pilot to fail to generate routes correctly and lead to Envoy listeners stuck indefinitely at startup in a warming state.
+- Improve the robustness of the SDS node agent: if Envoy sends a SDS request with an empty `ResourceNames`, ignore it and wait for the next request instead of closing the connection ([Issue 13853](https://github.com/istio/istio/issues/13853)).
+- In prior releases Pilot automatically injected the experimental `envoy.filters.network.mysql_proxy` filter into the outbound filter chain if the service port name is `mysql`.  This was surprising and caused issues for some operators, so Pilot will now automatically inject the `envoy.filters.network.mysql_proxy` filter only if the `PILOT_ENABLE_MYSQL_FILTER` environment variable is set to `1` ([Issue 13998](https://github.com/istio/istio/issues/13998)).
+- Fix issue where Mixer policy checks were incorrectly disabled for TCP ([Issue 13868](https://github.com/istio/istio/issues/13868)).
+
+## Small enhancements
+
+- Add `--applicationPorts` option to the `ingressgateway` Helm charts.  When set to a comma-delimited list of ports, readiness checks will fail until all the ports become active.  When configured, traffic will not be sent to Envoys stuck in the warming state.
+- Increase memory limit in the `ingressgateway` Helm chart to 1GB and add resource `request` and `limits` to the SDS node agent container to support HPA autoscaling.