istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

[release-1.25] Release notes for 1.25.2 and 1.24.5 (#16407) 

* add release notes

Signed-off-by: Daniel Hawton <daniel@hawton.org>

* 1.25.2 data/args.yaml bump

Signed-off-by: Daniel Hawton <daniel@hawton.org>

---------

Signed-off-by: Daniel Hawton <daniel@hawton.org>
This commit is contained in:
Daniel Hawton 2025-04-14 23:53:22 +02:00 committed by GitHub
parent 135e74ae7b
commit b42dad5fbc
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
11 changed files with 91 additions and 30 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
content/en/boilerplates/snips/args.sh
View File

@ -29,5 +29,5 @@ ENDSNIP
ENDSNIP
! IFS=$'\n' read -r -d '' bpsnip_args_istio_full_version <<\ENDSNIP
1.25.1
1.25.2
ENDSNIP

2
content/en/boilerplates/snips/revision-tags-middle.sh
View File

@ -27,6 +27,6 @@ istioctl tag list
! IFS=$'\n' read -r -d '' bpsnip_revision_tags_middle__1_out <<\ENDSNIP
TAG REVISION NAMESPACES
default 1-24-1 ...
prod-canary 1-25-1 ...
prod-canary 1-25-2 ...
prod-stable 1-24-1 ...
ENDSNIP

2
content/en/docs/ambient/install/helm/all-in-one/snips.sh
View File

@ -44,7 +44,7 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_show_components_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-ambient istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ambient-1.25.1 1.25.1
istio-ambient istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ambient-1.25.2 1.25.2
ENDSNIP
snip_check_pods() {

16
content/en/docs/ambient/install/helm/snips.sh
View File

@ -56,10 +56,10 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_show_components_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.1 1.25.1
istio-cni istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed cni-1.25.1 1.25.1
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.25.1 1.25.1
ztunnel istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ztunnel-1.25.1 1.25.1
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.2 1.25.2
istio-cni istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed cni-1.25.2 1.25.2
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.25.2 1.25.2
ztunnel istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ztunnel-1.25.2 1.25.2
ENDSNIP
snip_check_pods() {
@ -79,10 +79,10 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_uninstall_1_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.1 1.25.1
istio-cni istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed cni-1.25.1 1.25.1
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.25.1 1.25.1
ztunnel istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ztunnel-1.25.1 1.25.1
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.2 1.25.2
istio-cni istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed cni-1.25.2 1.25.2
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.25.2 1.25.2
ztunnel istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed ztunnel-1.25.2 1.25.2
ENDSNIP
snip_delete_ingress() {

2
content/en/docs/setup/additional-setup/getting-started-istio-apis/snips.sh
View File

@ -26,7 +26,7 @@ curl -L https://istio.io/downloadIstio | sh -
}
snip_download_istio_2() {
curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.25.1 TARGET_ARCH=x86_64 sh -
curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.25.2 TARGET_ARCH=x86_64 sh -
}
snip_download_istio_4() {

12
content/en/docs/setup/install/helm/snips.sh
View File

@ -31,7 +31,7 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_installation_steps_3_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.1 1.25.1
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.2 1.25.2
ENDSNIP
snip_install_discovery() {
@ -44,8 +44,8 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_installation_steps_5_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.1 1.25.1
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.25.1 1.25.1
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.2 1.25.2
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.25.2 1.25.2
ENDSNIP
snip_installation_steps_6() {
@ -89,7 +89,7 @@ kubectl get deployments -n istio-system --output wide
! IFS=$'\n' read -r -d '' snip_installation_steps_7_out <<\ENDSNIP
NAME READY UP-TO-DATE AVAILABLE AGE CONTAINERS IMAGES SELECTOR
istiod 1/1 1 1 10m discovery docker.io/istio/pilot:1.25.1 istio=pilot
istiod 1/1 1 1 10m discovery docker.io/istio/pilot:1.25.2 istio=pilot
ENDSNIP
snip_install_ingressgateway() {
@ -103,8 +103,8 @@ helm ls -n istio-system
! IFS=$'\n' read -r -d '' snip_helm_ls_out <<\ENDSNIP
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.1 1.25.1
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.25.1 1.25.1
istio-base istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.25.2 1.25.2
istiod istio-system 1 2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.25.2 1.25.2
ENDSNIP
snip_delete_delete_gateway_charts() {

16
content/en/docs/setup/upgrade/canary/snips.sh
View File

@ -99,12 +99,12 @@ istioctl proxy-status | grep "\.test-ns "
snip_usage_1() {
istioctl install --revision=1-24-1 --set profile=minimal --skip-confirmation
istioctl install --revision=1-25-1 --set profile=minimal --skip-confirmation
istioctl install --revision=1-25-2 --set profile=minimal --skip-confirmation
}
snip_usage_2() {
istioctl tag set prod-stable --revision 1-24-1
istioctl tag set prod-canary --revision 1-25-1
istioctl tag set prod-canary --revision 1-25-2
}
snip_usage_3() {
@ -128,13 +128,13 @@ istioctl ps
! IFS=$'\n' read -r -d '' snip_usage_5_out <<\ENDSNIP
NAME CLUSTER CDS LDS EDS RDS ECDS ISTIOD VERSION
curl-78ff5975c6-62pzf.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-25-1-7f6fc6cfd6-s8zfg 1.25.1
curl-78ff5975c6-62pzf.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-25-2-7f6fc6cfd6-s8zfg 1.25.2
curl-78ff5975c6-8kxpl.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-24-1-bdf5948d5-n72r2 1.24.1
curl-78ff5975c6-8q7m6.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-24-1-bdf5948d5-n72r2 1-24.1
ENDSNIP
snip_usage_6() {
istioctl tag set prod-stable --revision 1-25-1 --overwrite
istioctl tag set prod-stable --revision 1-25-2 --overwrite
}
snip_usage_7() {
@ -148,13 +148,13 @@ istioctl ps
! IFS=$'\n' read -r -d '' snip_usage_8_out <<\ENDSNIP
NAME CLUSTER CDS LDS EDS RDS ECDS ISTIOD VERSION
curl-5984f48bc7-kmj6x.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-25-1-7f6fc6cfd6-jsktb 1.25.1
curl-78ff5975c6-jldk4.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-25-1-7f6fc6cfd6-jsktb 1.25.1
curl-7cdd8dccb9-5bq5n.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-25-1-7f6fc6cfd6-jsktb 1.25.1
curl-5984f48bc7-kmj6x.app-ns-1 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-25-2-7f6fc6cfd6-jsktb 1.25.2
curl-78ff5975c6-jldk4.app-ns-3 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-25-2-7f6fc6cfd6-jsktb 1.25.2
curl-7cdd8dccb9-5bq5n.app-ns-2 Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-25-2-7f6fc6cfd6-jsktb 1.25.2
ENDSNIP
snip_default_tag_1() {
istioctl tag set default --revision 1-25-1
istioctl tag set default --revision 1-25-2
}
snip_uninstall_old_control_plane_1() {

6
content/en/docs/setup/upgrade/helm/snips.sh
View File

@ -79,15 +79,15 @@ helm upgrade istio-base istio/base --set defaultRevision=canary -n istio-system
snip_usage_1() {
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-24-1 -n istio-system | kubectl apply -f -
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-canary}" --set revision=1-25-1 -n istio-system | kubectl apply -f -
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-canary}" --set revision=1-25-2 -n istio-system | kubectl apply -f -
}
snip_usage_2() {
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-25-1 -n istio-system | kubectl apply -f -
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-25-2 -n istio-system | kubectl apply -f -
}
snip_default_tag_1() {
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{default}" --set revision=1-25-1 -n istio-system | kubectl apply -f -
helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{default}" --set revision=1-25-2 -n istio-system | kubectl apply -f -
}
snip_in_place_upgrade_1() {

29
content/en/news/releases/1.24.x/announcing-1.24.5/index.md Normal file
View File

@ -0,0 +1,29 @@
---
title: Announcing Istio 1.24.5
linktitle: 1.24.5
subtitle: Patch Release
description: Istio 1.24.5 patch release.
publishdate: 2025-04-14
release: 1.24.5
---
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.24.4 and Istio 1.24.5.
{{< relnote >}}
## Changes
- **Fixed** corner cases where `istio-cni` might block its own upgrade. Added fallback logging (in case agent is down) to a fixed-size node-local log file.
([Issue #55215](https://github.com/istio/istio/issues/55215))
- **Fixed** an issue where validation webhook incorrectly reported a warning when a `ServiceEntry` configured `workloadSelector` with DNS resolution.
([Issue #50164](https://github.com/istio/istio/issues/50164))
- **Fixed** an issue where proxy memory goes up with gRPC streaming services.
- **Fixed** an issue causing changes to `ExternalName` services to sometimes be skipped due to a cache eviction bug.
- **Fixed** a regression where the SDS `ROOTCA` resource included only a single root certificate, even if the control plane
was configured with both an active root and a passive root certificate that was introduced in 1.24.4.
([Issue #55793](https://github.com/istio/istio/issues/55793))

32
content/en/news/releases/1.25.x/announcing-1.25.2/index.md Normal file
View File

@ -0,0 +1,32 @@
---
title: Announcing Istio 1.25.2
linktitle: 1.25.2
subtitle: Patch Release
description: Istio 1.25.2 patch release.
publishdate: 2025-04-14
release: 1.25.2
---
This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.25.1 and Istio 1.25.2.
{{< relnote >}}
## Changes
- **Added** an environment variable prefix `CA_HEADER_` (similar to `XDS_HEADER_`) that can be added to CA requests for different purposes, such as routing to appropriate external `istiod`s.
Istio sidecar proxy, router, and waypoint now support this feature. ([Issue #55064](https://github.com/istio/istio/issues/55064))
- **Fixed** corner cases where `istio-cni` might block its own upgrade. Added fallback logging (in case agent is down) to a fixed-size node-local log file.
([Issue #55215](https://github.com/istio/istio/issues/55215))
- **Fixed** an issue where `AuthorizationPolicy`'s `WaypointAccepted` status condition was not being updated to reflect the resolution of a `GatewayClass` target reference.
- **Fixed** an issue where `WaypointAccepted` status condition for `AuthorizationPolicies` that referenced a `GatewayClass` and did not reside in the root namespace was not being updated with the correct reason and message.
- **Fixed** an issue where proxy memory goes up with gRPC streaming services.
- **Fixed** an issue causing changes to `ExternalName` services to sometimes be skipped due to a cache eviction bug.
- **Fixed** a regression where the SDS `ROOTCA` resource included only a single root certificate, even if the control plane
was configured with both an active root and a passive root certificate that was introduced in 1.25.1.
([Issue #55793](https://github.com/istio/istio/issues/55793))

2
data/args.yml
View File

@ -2,7 +2,7 @@
version: "1.25"
# The full Istio version identifier the docs describe
full_version: "1.25.1"
full_version: "1.25.2"
# The previous Istio version identifier the docs describe, used for upgrade documentation
previous_version: "1.24"