mirror of https://github.com/istio/istio.io.git
Add 1.15.0 release notes and announcement (#11759)
* Add 1.15.0 release notes * Make requested edits * Add release announcement * Add upgrade notes section * Rearrange items * Update supported k8s versions * Update supported releases page * Fix file placement * Remove alias * Add Solo.io. to spelling
This commit is contained in:
Sam Naser
GitHub
parent
491b7803d5
commit
b1144fee58
11
.spelling
11
.spelling
|
|
@ -426,6 +426,7 @@ gRPC
|
|||
grpc
|
||||
Haidian
|
||||
Harvey
|
||||
Hawton
|
||||
helloworld
|
||||
Hashicorp
|
||||
Herness
|
||||
|
|
@ -477,6 +478,7 @@ IPv4
|
|||
IPv6
|
||||
Istio
|
||||
istio-agent
|
||||
istio-cni
|
||||
istio-control
|
||||
istio-discovery
|
||||
istio-ecosystem
|
||||
|
|
@ -594,6 +596,7 @@ maintainership
|
|||
Mandar
|
||||
Manolache
|
||||
Marshalers
|
||||
Mattix
|
||||
MB
|
||||
Meetup
|
||||
meetup
|
||||
|
|
@ -638,6 +641,7 @@ MySQL
|
|||
mysql
|
||||
mysqldb
|
||||
Nambiar
|
||||
nameservers
|
||||
namespace
|
||||
namespaced
|
||||
namespaces
|
||||
|
|
@ -661,6 +665,7 @@ non-sandboxed
|
|||
non-mTLS
|
||||
normalization
|
||||
ns
|
||||
nsenter
|
||||
NUL
|
||||
NULs
|
||||
Nurmamat
|
||||
|
|
@ -855,6 +860,7 @@ Snell-Feikema
|
|||
SNI
|
||||
SolarWinds
|
||||
Solo.io
|
||||
Solo.io.
|
||||
Splunk
|
||||
SPIFFE
|
||||
SPIFFE-compliant
|
||||
|
|
@ -914,6 +920,7 @@ TLS-secured
|
|||
ToC
|
||||
toolbelt
|
||||
toolchain
|
||||
topologySpreadConstraints
|
||||
touchpoints
|
||||
tradeoff
|
||||
tradeoffs
|
||||
|
|
@ -936,6 +943,7 @@ Unmarshalers
|
|||
Unmarshaling
|
||||
unnormalized
|
||||
unsampled
|
||||
untar
|
||||
untrusted
|
||||
upgradeability
|
||||
Upgradeability
|
||||
|
|
@ -951,6 +959,7 @@ user1
|
|||
UTF-8
|
||||
v0.14.0
|
||||
v1
|
||||
v1.55
|
||||
v1.7.4
|
||||
v1.7.6_coreos.0
|
||||
v1.9
|
||||
|
|
@ -1018,6 +1027,7 @@ x509
|
|||
x86
|
||||
xDS
|
||||
Xia
|
||||
Xiao
|
||||
Xining
|
||||
xRoute
|
||||
Xu
|
||||
|
|
@ -1039,3 +1049,4 @@ Zhong
|
|||
Zhonghu
|
||||
Zhu
|
||||
Zipkin
|
||||
Ziyang
|
||||
|
|
|
|||
|
|
@ -51,18 +51,19 @@ current `<minor>` release. A patch is usually a small change relative to the `<m
|
|||
|
||||
## Support status of Istio releases
|
||||
|
||||
| Version | Currently Supported | Release Date | End of Life | Supported Kubernetes Versions | Tested, but not supported |
|
||||
|-----------------|----------------------|-------------------|--------------------------|--------------------------------|------------------------------|
|
||||
| master | No, development only | | | | |
|
||||
| 1.14 | Yes | May 24, 2022 | ~January 2023 (Expected) | 1.21, 1.22, 1.23, 1.24 | 1.16, 1.17, 1.18, 1.19, 1.20 |
|
||||
| 1.13 | Yes | February 11, 2022 | ~October 2022 (Expected) | 1.20, 1.21, 1.22, 1.23 | 1.16, 1.17, 1.18, 1.19 |
|
||||
| 1.12 | Yes | November 18, 2021 | Jul 12, 2022 | 1.19, 1.20, 1.21, 1.22 | 1.16, 1.17, 1.18 |
|
||||
| 1.11 | No | August 12, 2021 | Mar 25, 2022 | 1.18, 1.19, 1.20, 1.21, 1.22 | 1.16, 1.17 |
|
||||
| 1.10 | No | May 18, 2021 | Jan 7, 2022 | 1.18, 1.19, 1.20, 1.21 | 1.16, 1.17, 1.22 |
|
||||
| 1.9 | No | February 9, 2021 | Oct 8, 2021 | 1.17, 1.18, 1.19, 1.20 | 1.15, 1.16 |
|
||||
| 1.8 | No | November 10, 2020 | May 12, 2021 | 1.16, 1.17, 1.18, 1.19 | 1.15 |
|
||||
| 1.7 | No | August 21, 2020 | Feb 25, 2021 | 1.16, 1.17, 1.18 | 1.15 |
|
||||
| 1.6 and earlier | No | | | | |
|
||||
| Version | Currently Supported | Release Date | End of Life | Supported Kubernetes Versions | Tested, but not supported |
|
||||
|-----------------|----------------------|-------------------|--------------------------|-------------------------------|------------------------------------|
|
||||
| master | No, development only | | | | |
|
||||
| 1.15 | Yes | August 31, 2022 | ~March 2023 (Expected) | 1.22, 1.23, 1.24, 1.25 | 1.16, 1.17, 1.18, 1.19, 1.20, 1.21 |
|
||||
| 1.14 | Yes | May 24, 2022 | ~January 2023 (Expected) | 1.21, 1.22, 1.23, 1.24 | 1.16, 1.17, 1.18, 1.19, 1.20 |
|
||||
| 1.13 | Yes | February 11, 2022 | ~October 2022 (Expected) | 1.20, 1.21, 1.22, 1.23 | 1.16, 1.17, 1.18, 1.19 |
|
||||
| 1.12 | No | November 18, 2021 | Jul 12, 2022 | 1.19, 1.20, 1.21, 1.22 | 1.16, 1.17, 1.18 |
|
||||
| 1.11 | No | August 12, 2021 | Mar 25, 2022 | 1.18, 1.19, 1.20, 1.21, 1.22 | 1.16, 1.17 |
|
||||
| 1.10 | No | May 18, 2021 | Jan 7, 2022 | 1.18, 1.19, 1.20, 1.21 | 1.16, 1.17, 1.22 |
|
||||
| 1.9 | No | February 9, 2021 | Oct 8, 2021 | 1.17, 1.18, 1.19, 1.20 | 1.15, 1.16 |
|
||||
| 1.8 | No | November 10, 2020 | May 12, 2021 | 1.16, 1.17, 1.18, 1.19 | 1.15 |
|
||||
| 1.7 | No | August 21, 2020 | Feb 25, 2021 | 1.16, 1.17, 1.18 | 1.15 |
|
||||
| 1.6 and earlier | No | | | | |
|
||||
|
||||
{{< warning >}}
|
||||
[Kubernetes 1.22 removed some deprecated APIs](https://kubernetes.io/blog/2021/07/14/upcoming-changes-in-kubernetes-1-22/) and as a result versions of Istio prior to 1.10.0 will no longer work. If you are upgrading your Kubernetes version, make sure that your Istio version is still supported.
|
||||
|
|
|
|||
|
|
@ -0,0 +1,8 @@
|
|||
---
|
||||
title: 1.15.x Releases
|
||||
description: Announcements for the 1.15 release and its associated patch releases.
|
||||
weight: 15
|
||||
list_by_publishdate: true
|
||||
layout: release-grid
|
||||
decoration: dot
|
||||
---
|
||||
|
|
@ -0,0 +1,50 @@
|
|||
---
|
||||
title: Announcing Istio 1.15
|
||||
linktitle: 1.15
|
||||
subtitle: Major Update
|
||||
description: Istio 1.15 release announcement.
|
||||
publishdate: 2022-08-31
|
||||
release: 1.15.0
|
||||
skip_list: true
|
||||
aliases:
|
||||
- /news/announcing-1.15
|
||||
- /news/announcing-1.15.0
|
||||
---
|
||||
|
||||
We are pleased to announce the release of Istio 1.15!
|
||||
|
||||
{{< relnote >}}
|
||||
|
||||
This is the third Istio release of 2022. We would like to thank the entire Istio community
|
||||
for helping to get Istio 1.15.0 published. Special thanks are due to the release managers Sam Naser and Aryan Gupta from Google, Ziyang Xiao from Intel and Daniel Hawton from Solo.io. As always, our gratitude goes to Test & Release WG lead Eric Van Norman (IBM) for his help and guidance.
|
||||
|
||||
{{< tip >}}
|
||||
Istio 1.15.0 is officially supported on Kubernetes versions `1.22` to `1.25`.
|
||||
{{< /tip >}}
|
||||
|
||||
## What's new
|
||||
|
||||
Here are some of the highlights of the release:
|
||||
|
||||
### arm64 support
|
||||
|
||||
We now build Istio for arm64, so you can run it on your Raspberry Pi, or your Tau T2A VMs.
|
||||
|
||||
### istioctl uninstall
|
||||
|
||||
We hope you never need to uninstall Istio from a cluster, but in case you do — maybe you want to reinstall it with different parameters? — we've had experimental support for uninstalling Istio for many releases. In 1.15, we've fixed the remaining issues and promoted the feature to stable.
|
||||
|
||||
## Upgrading to 1.15
|
||||
|
||||
When you upgrade, we would like to hear from you! Please take a few minutes to respond to a brief [survey](https://forms.gle/SWHFBmwJspusK1hv6) to let us know how we’re doing.
|
||||
|
||||
You can also join the conversation at [Discuss Istio](https://discuss.istio.io/), or join our [Slack workspace](https://slack.istio.io/).
|
||||
Would you like to contribute directly to Istio? Find and join one of our [Working Groups](https://github.com/istio/community/blob/master/WORKING-GROUPS.md) and help us improve.
|
||||
|
||||
## Istio at KubeCon NA
|
||||
|
||||
Istio will be at KubeCon NA this October in Detroit. Don't miss the talk from TOC member John Howard, with Keith Mattix from Microsoft, where you will learn about the new GAMMA initiative for common service mesh APIs. There are also talks on dynamically testing releases in production and decentralized routing for a sharded application. And, if that's not enough, there's a whole co-located event dedicated to service mesh - ServiceMeshCon NA. Join program chairs Craig Box (from Google) and Lin Sun (from Solo.io) for a day discussing the ins and outs of service mesh technology.
|
||||
|
||||
## CNCF progress update
|
||||
|
||||
In April, we announced that Istio has been proposed to become a CNCF incubation process. Our team has been hard at work preparing our application, and the TOC is currently in the public request for comments phase. Please see this thread if you want to participate!
|
||||
|
|
@ -0,0 +1,142 @@
|
|||
---
|
||||
title: Istio 1.15.0 Change Notes
|
||||
linktitle: 1.15.0
|
||||
subtitle: Minor Release
|
||||
description: Istio 1.15.0 change notes.
|
||||
publishdate: 2022-08-31
|
||||
release: 1.15.0
|
||||
weight: 10
|
||||
---
|
||||
|
||||
## Traffic Management
|
||||
|
||||
- **Improved** the number of pushes to gateway proxies by not pushing when services are not visible from the gateway.
|
||||
([Issue #39110](https://github.com/istio/istio/issues/39110))
|
||||
|
||||
- **Improved** compatibility with minimal host operating systems without `nsenter` binary (like Talos OS). The `cni.conf` flag `HostNSEnterExec` reverts to old behavior with use of nsenter.
|
||||
([Issue #38794](https://github.com/istio/istio/issues/38794))
|
||||
|
||||
- **Updated** istiod to allow unknown flags for backward-compatibility. If an unknown flag is passed, no warning or error will be logged.
|
||||
|
||||
- **Added** a validation warning when protocol is unset and address is also unset.
|
||||
([Issue #27990](https://github.com/istio/istio/issues/27990))
|
||||
|
||||
- **Added** support for configuring internal addresses for the mesh. This can be enabled by setting
|
||||
`ENABLE_HCM_INTERNAL_NETWORKS` to true.
|
||||
|
||||
- **Added** sidecar `traffic.sidecar.istio.io/excludeInterfaces` annotation.
|
||||
([Issue #39404](https://github.com/istio/istio/pull/39404))
|
||||
|
||||
- **Added** support for configuring `max_connection_duration` in `DestinationRule`.
|
||||
|
||||
- **Added** support to inject faults by specifying gRPC status code.
|
||||
|
||||
- **Added** support for sending parallel DNS queries to all nameservers in the Istio agent. This feature is disabled by default and can be enabled by setting the istio-agent environment variable `DNS_FORWARD_PARALLEL=true`.
|
||||
([Issue #39598](https://github.com/istio/istio/issues/39598))
|
||||
|
||||
- **Added** support for tunneling outbound traffic via external HTTP forward proxies using HTTP CONNECT or POST methods.
|
||||
Tunnel settings can be applied only to TCP and TLS listeners, HTTP listeners are not supported for now.
|
||||
|
||||
- **Added** an option for sidecar `Host` header matching to ignore port numbers. This can be controlled by the `SIDECAR_IGNORE_PORT_IN_HOST_MATCH` environment variable.
|
||||
|
||||
- **Fixed** CNI installation to detect changes in projected service account token
|
||||
and reinstall istio-cni plugin with a new kubeconfig.
|
||||
([Issue #38077](https://github.com/istio/istio/issues/38077))
|
||||
|
||||
- **Fixed** an issue where some `ServiceEntry` hostnames could cause non-deterministic Envoy routes.
|
||||
([Issue #38678](https://github.com/istio/istio/issues/38678))
|
||||
|
||||
- **Fixed** an issue when network gateway names could not be properly resolved in some cases.
|
||||
([Issue #38689](https://github.com/istio/istio/issues/38689))
|
||||
|
||||
- **Fixed** an issue where updating split `DestinationRules` did not take effect if the RDS/CDS/EDS cache was enabled.
|
||||
([Issue #39726](https://github.com/istio/istio/issues/39726))
|
||||
|
||||
- **Fixed** an issue where Istio would send traffic to unready pods when `PILOT_SEND_UNHEALTHY_ENDPOINTS` was enabled.
|
||||
([Issue #39825](https://github.com/istio/istio/issues/39825))
|
||||
|
||||
- **Fixed** an issue causing rejected configuration when using `STATIC` `ServiceEntries` with `PASSTHROUGH` `DestinationRules`.
|
||||
([Issue #39736](https://github.com/istio/istio/issues/39736))
|
||||
|
||||
- **Fixed** an issue causing Envoy clusters to be stuck initializing, blocking configuration updates or proxy startup.
|
||||
([Issue #38709](https://github.com/istio/istio/issues/38709))
|
||||
|
||||
- **Fixed** an issue causing traffic not to match (and return a `404`) when using wildcard domain names and including an unexpected port in the `Host` header.
|
||||
|
||||
- **Fixed** an issue causing traffic to match an unexpected route when using wildcard domain names and including a port in the `Host` header.
|
||||
|
||||
- **Fixed** a potential memory leak triggered by updating `ServiceEntry` hostname.
|
||||
|
||||
- **Fixed** any issue that can cause xDS configuration updates to be blocked during high traffic.
|
||||
([Issue #39209](https://github.com/istio/istio/issues/39209))
|
||||
|
||||
## Security
|
||||
|
||||
- **Added** an istio-agent environment variable `WORKLOAD_RSA_KEY_SIZE` for configuring the RSA key size of workload certificates.
|
||||
|
||||
- **Fixed** a bug where the `n` dynamically generated by JWKS was not base64 encoded, causing envoy to fail to parse it correctly.
|
||||
|
||||
## Telemetry
|
||||
|
||||
- **Fixed** the TCP metadata exchange between sidecar client and `ISTIO_MUTUAL`, TCP server at the gateway.
|
||||
|
||||
- **Fixed** a bug that would ignore some configuration when specifying multiple `accessLogging` in Telemetry resources within a single stanza. With this fix, all provided access logging configuration within a single stanza of Telemetry resource are respected.
|
||||
([Issue #39468](https://github.com/istio/istio/issues/39468))
|
||||
|
||||
## Extensibility
|
||||
|
||||
- **Added** the `WASM_MODULE_EXPIRY`, `WASM_PURGE_INTERVAL`, `WASM_HTTP_REQUEST_TIMEOUT`, and `WASM_HTTP_REQUEST_MAX_RETRIES` istio-agent environment variables to control WASM cache related parameters.
|
||||
|
||||
- **Added** the ability to decompress and/or untar the WASM binary when it is pulled via HTTP/HTTPS.
|
||||
|
||||
- **Added** the `WASM_INSECURE_REGISTRIES` istio-agent environment variable for when the `WasmPlugin` is pointing HTTP/HTTPS server.
|
||||
|
||||
- **Extended** the scope of `ImagePullPolicy` in `WasmPlugin` to accept HTTP/HTTPS URLs in addition to OCI image URLs.
|
||||
|
||||
## Installation
|
||||
|
||||
- **Added** support for `arm64` architecture for all components.
|
||||
([Issue #26652](https://github.com/istio/istio/issues/26652))
|
||||
|
||||
- **Added** `--log_output_level` and `--log_as_json` to the `istio-init` container (as they are in `istio-proxy`).
|
||||
|
||||
- **Added** values to the Istio Gateway Helm chart for configuring [topologySpreadConstraints](https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/) on the gateway deployment.
|
||||
|
||||
- **Added** support for watching local secret resource updates for external istiod.
|
||||
([Issue #31946](https://github.com/istio/istio/issues/31946))
|
||||
|
||||
- **Updated** the default value of the feature flag `ENABLE_LEGACY_FSGROUP_INJECTION` to false.
|
||||
This may cause issues with sidecars when installing on Helm on Kubernetes versions prior to 1.19.
|
||||
|
||||
- **Updated** the Kiali addon to the latest version (v1.55).
|
||||
|
||||
- **Improved** [external control plane setup instructions](/docs/setup/install/external-controlplane/), including tips for simpler control plane ingress setup, making it easier to experiment with the external control plane deployment model in a test environment.
|
||||
|
||||
- **Removed** the deprecated `remote.yaml` profile which is equivalent to the default profile.
|
||||
([Issue #38832](https://github.com/istio/istio/issues/38832))
|
||||
|
||||
## istioctl
|
||||
|
||||
- **Promoted** `istioctl x uninstall` to `istioctl uninstall`.
|
||||
([Issue #40339](https://github.com/istio/istio/issues/40339))
|
||||
|
||||
- **Improved** the output format of the active logging levels.
|
||||
|
||||
- **Added** a new analyzer for Envoy filter patch operations to provide warnings when relative patch operations are used without a priority set which can cause Envoy filters not to be applied correctly.
|
||||
([Issue #37415](https://github.com/istio/istio/issues/37415))
|
||||
|
||||
- **Added** `istioctl analyze` beta API version support for file resources.
|
||||
|
||||
- **Added** pod name and cluster name to bookinfo's reviews, where the cluster name is determined by the `CLUSTER_NAME` environment variable on the reviews deployments.
|
||||
|
||||
- **Added** support for parsing list type of files in `istioctl analyze`.
|
||||
([Issue #39982](https://github.com/istio/istio/issues/39982))
|
||||
|
||||
- **Added** description to `istioctl admin log`.
|
||||
|
||||
- **Fixed** an issue causing `istioctl analyze` to return an unexpected IST0134 message when `ServiceEntry` address is empty but mesh config `ISTIO_META_DNS_AUTO_ALLOCATE` is enabled.
|
||||
|
||||
- **Fixed** an issue causing `istioctl x injector list` to provide incorrect pod information.
|
||||
|
||||
- **Fixed** an issue causing `ConflictingMeshGatewayVirtualServiceHosts (IST0109)` message to appear with `istioctl analyze` when using `exportTo` for a specific namespace.
|
||||
([Issue #39634](https://github.com/istio/istio/issues/39634))
|
||||
|
|
@ -0,0 +1,12 @@
|
|||
---
|
||||
title: Istio 1.15 Upgrade Notes
|
||||
description: Important changes to consider when upgrading to Istio 1.15.0.
|
||||
publishdate: 2022-08-31
|
||||
weight: 20
|
||||
---
|
||||
|
||||
When you upgrade from Istio 1.14.x to Istio 1.15.0, you need to consider the changes on this page.
|
||||
These notes detail the changes which purposefully break backwards compatibility with Istio 1.14.0.
|
||||
The notes also mention changes which preserve backwards compatibility while introducing new behavior.
|
||||
Changes are only included if the new behavior would be unexpected to a user of Istio `1.14.x`.
|
||||
Users upgrading from 1.13.x to Istio 1.15.0 should also reference the [1.15.0 change logs](/news/releases/1.15.x/announcing-1.15/change-notes/).
|
||||
|
|
@ -29,7 +29,7 @@ source_branch_name: release-1.15
|
|||
doc_branch_name: master
|
||||
|
||||
# The list of supported versions described by the docs
|
||||
supported_kubernetes_versions: ["1.21", "1.22", "1.23", "1.24"]
|
||||
supported_kubernetes_versions: ["1.22", "1.23", "1.24", "1.25"]
|
||||
|
||||
####### Static values
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue