5.1 KiB
| title | description | weight | aliases | owner | test | ||
|---|---|---|---|---|---|---|---|
| Supported Releases | The currently supported Istio releases. | 35 |
|
istio/wg-docs-maintainers | n/a |
This page lists the status, timeline and policy for currently supported releases. Supported releases of Istio include releases that are in the active maintenance window and are patched for security and bug fixes. Subsequent patch releases on a minor release do not contain backward incompatible changes.
- Support policy
- Naming scheme
- Control Plane/Data Plane Skew
- Support status of Istio releases
- Supported releases without known Common Vulnerabilities and Exposures (CVEs)
- Supported Envoy Versions
Support policy
We produce new builds of Istio for each commit. Around once a quarter, we build a minor release and run through several additional tests as well as release qualification. We release patch versions for issues found in minor releases.
The various types of releases represent a different product quality level and level of assistance from the Istio community. In this context, support means that the community will produce patch releases for critical issues and offer technical assistance. Separately, 3rd parties and partners may offer longer-term support solutions.
| Type | Support Level | Quality and Recommended Use |
|---|---|---|
| Development Build | No support | Dangerous, may not be fully reliable. Useful to experiment with. |
| Minor Release | Support provided until 6 weeks after the N+2 minor release (ex. 1.11 supported until 6 weeks after 1.13.0 is released) | |
| Patch | Same as the corresponding Minor release | Users are encouraged to adopt patch releases as soon as they are available for a given release. |
| Security Patch | Same as a Patch, but contains a security fix. Sometimes security patches will contain additional code/fixes in addition to the security fixes. | Given the nature of security fixes, users are strongly encouraged to adopt security patches after release. |
You can find available releases on the releases page, and if you're the adventurous type, you can learn about our development builds on the development builds wiki. You can find high-level releases notes for each minor and patch release here.
Naming scheme
Our naming scheme is as follows:
{{< text plain >}} .. {{< /text >}}
where <minor> is increased for each release, and <patch> counts the number of patches for the
current <minor> release. A patch is usually a small change relative to the <minor> release.
Control Plane/Data Plane Skew
The Istio control plane can be one version ahead of the data plane. However, the data plane cannot be ahead of control plane. We recommend using revisions so that there is no skew at all.
As of now, data plane to data plane is compatible across all versions; however, this may change in the future.
Support status of Istio releases
{{< support_status_table >}}
Supported releases without known Common Vulnerabilities and Exposures (CVEs)
{{< warning >}} Istio does not guarantee that minor releases that fall outside the support window have all known CVEs patched. Please keep up-to-date and use a supported version. {{< /warning >}}
| Minor Releases | Patched versions with no known CVEs |
|---|---|
| 1.22.x | 1.22.2+ |
| 1.21.x | 1.21.4+ |
Supported Envoy Versions
Istio's data plane is based on Envoy.
The relationship between the two project's versions:
| Istio version | Envoy release branch |
|---|---|
| 1.22.x | release/v1.30 |
| 1.21.x | release/v1.29 |
You can find the precise Envoy commit used by Istio [in the istio/proxy repository](https://github.com/istio/proxy/blob/{{< source_branch_name >}}/WORKSPACE#L26): look for the ENVOY_SHA variable.