istio
/
istio.io
mirror of https://github.com/istio/istio.io.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
istio.io/archive/v1.3/news/2019/announcing-1.1/index.html

159 lines
38 KiB
HTML
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<!doctype html><html lang=en itemscope itemtype=https://schema.org/WebPage><head><meta charset=utf-8><meta http-equiv=x-ua-compatible content="IE=edge"><meta name=viewport content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name=theme-color content=#466BB0><meta name=title content="Announcing Istio 1.1"><meta name=description content="Istio 1.1 release announcement."><meta name=author content="The Istio Team"><meta name=keywords content=microservices,services,mesh><meta property=og:title content="Announcing Istio 1.1"><meta property=og:type content=website><meta property=og:description content="Istio 1.1 release announcement."><meta property=og:url content=/v1.3/news/2019/announcing-1.1/><meta property=og:image content=/v1.3/img/istio-whitelogo-bluebackground-framed.svg><meta property=og:image:alt content="Istio Logo"><meta property=og:image:width content=112><meta property=og:image:height content=150><meta property=og:site_name content=Istio><meta name=twitter:card content=summary><meta name=twitter:site content=@IstioMesh><title>Istioldie 1.3 / Announcing Istio 1.1</title><script async src="https://www.googletagmanager.com/gtag/js?id=UA-98480406-2"></script><script>window.dataLayer=window.dataLayer||[];function gtag(){dataLayer.push(arguments);}
gtag('js',new Date());gtag('config','UA-98480406-2');</script><link rel=alternate type=application/rss+xml title="Istio Blog" href=/v1.3/blog/feed.xml><link rel=alternate type=application/rss+xml title="Istio News" href=/v1.3/news/feed.xml><link rel=alternate type=application/rss+xml title="Istio Blog and News" href=/v1.3/feed.xml><link rel="shortcut icon" href=/v1.3/favicons/favicon.ico><link rel=apple-touch-icon href=/v1.3/favicons/apple-touch-icon-180x180.png sizes=180x180><link rel=icon type=image/png href=/v1.3/favicons/favicon-16x16.png sizes=16x16><link rel=icon type=image/png href=/v1.3/favicons/favicon-32x32.png sizes=32x32><link rel=icon type=image/png href=/v1.3/favicons/android-36x36.png sizes=36x36><link rel=icon type=image/png href=/v1.3/favicons/android-48x48.png sizes=48x48><link rel=icon type=image/png href=/v1.3/favicons/android-72x72.png sizes=72x72><link rel=icon type=image/png href=/v1.3/favicons/android-96x96.png sizes=96xW96><link rel=icon type=image/png href=/v1.3/favicons/android-144x144.png sizes=144x144><link rel=icon type=image/png href=/v1.3/favicons/android-192x192.png sizes=192x192><link rel=manifest href=/v1.3/manifest.json><meta name=apple-mobile-web-app-title content=Istio><meta name=application-name content=Istio><link rel=stylesheet href="https://fonts.googleapis.com/css?family=Work+Sans:400|Chivo:400|Work+Sans:500,300,600,300italic,400italic,500italic,600italic|Chivo:500,300,600,300italic,400italic,500italic,600italic"><link rel=stylesheet href=/v1.3/css/all.css><script src=/v1.3/js/themes_init.min.js></script></head><body class="language-unknown archive-site"><script>const branchName="release-1.3";const docTitle="Announcing Istio 1.1";const iconFile="\/v1.3/img/icons.svg";const buttonCopy='Copy to clipboard';const buttonPrint='Print';const buttonDownload='Download';</script><script src="https://www.google.com/cse/brand?form=search-form" defer></script><script src=/v1.3/js/all.min.js data-manual defer></script><header><nav><a id=brand href=/v1.3/><span class=logo><svg viewBox="0 0 300 300"><circle cx="150" cy="150" r="146" stroke-width="2" /><path d="M65 240H225L125 270z"/><path d="M65 230l60-10V110z"/><path d="M135 220l90 10L135 30z"/></svg></span><span class=name>Istioldie 1.3</span></a><div id=hamburger><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#hamburger"/></svg></div><div id=header-links><a title="Learn how to deploy, use, and operate Istio." href=/v1.3/docs/>Docs</a>
<a title="Posts about using Istio." href=/v1.3/blog/2019/proxy/>Blog</a>
<span title="Timely news about the Istio project.">News</span>
<a title="Frequently Asked Questions about Istio." href=/v1.3/faq/>FAQ</a>
<a title="Get a bit more in-depth info about the Istio project." href=/v1.3/about/>About</a><div class=menu><button id=gearDropdownButton class=menu-trigger title="Options and settings" aria-label="Options and Settings" aria-controls=gearDropdownContent><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#gear"/></svg></button><div id=gearDropdownContent class=menu-content aria-labelledby=gearDropdownButton role=menu><a tabindex=-1 role=menuitem class=active id=light-theme-item>Light Theme</a>
<a tabindex=-1 role=menuitem id=dark-theme-item>Dark Theme</a><div role=separator></div><a tabindex=-1 role=menuitem id=syntax-coloring-item>Color Examples</a><div role=separator></div><h6>Other versions of this site</h6><a tabindex=-1 role=menuitem onclick="navigateToUrlOrRoot('https://istio.io/news\/2019\/announcing-1.1\/');return false;">Current Release</a>
<a tabindex=-1 role=menuitem onclick="navigateToUrlOrRoot('https://preliminary.istio.io/news\/2019\/announcing-1.1\/');return false;">Next Release</a>
<a tabindex=-1 role=menuitem href=https://archive.istio.io>Older Releases</a></div></div><button id=search-show title="Search this site" aria-label=Search><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#magnifier"/></svg></button></div><form id=search-form name=cse role=search><input type=hidden name=cx value=013699703217164175118:iwwf17ikgf4>
<input type=hidden name=ie value=utf-8>
<input type=hidden name=hl value=en>
<input type=hidden id=search-page-url value=/v1.3/search>
<input id=search-textbox class=form-control name=q type=search aria-label="Search this site">
<button id=search-close title="Cancel search" type=reset aria-label="Cancel search"><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#cancel-x"/></svg></button></form></nav></header><main class=primary><div id=sidebar-container class="sidebar-container sidebar-offcanvas"><nav id=sidebar aria-label="Section Navigation"><div class=directory><div class=card><button class="header dynamic" id=card0 title="News items for 2019." aria-controls=card0-body><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#newspaper"/></svg>2019 News</button><div class="body default" aria-labelledby=card0 role=region id=card0-body><ul role=tree aria-expanded=true class=leaf-section aria-labelledby=card0><li role=none><a role=treeitem title="Istio 1.3.5 release announcement." href=/v1.3/news/2019/announcing-1.3.5/>Announcing Istio 1.3.5</a></li><li role=none><a role=treeitem title="Upcoming Istio 1.2 end of life announcement." href=/v1.3/news/2019/announcing-1.2-eol/>Support for Istio 1.2 ends on December 13th, 2019</a></li><li role=none><a role=treeitem title="Security vulnerability disclosure for CVE-2019-18817." href=/v1.3/news/2019/istio-security-2019-006/>Security Update - ISTIO-SECURITY-2019-006</a></li><li role=none><a role=treeitem title="Istio 1.2.9 patch release." href=/v1.3/news/2019/announcing-1.2.9/>Announcing Istio 1.2.9</a></li><li role=none><a role=treeitem title="Istio 1.3.4 release announcement." href=/v1.3/news/2019/announcing-1.3.4/>Announcing Istio 1.3.4</a></li><li role=none><a role=treeitem title="Istio 1.2.8 patch release." href=/v1.3/news/2019/announcing-1.2.8/>Announcing Istio 1.2.8</a></li><li role=none><a role=treeitem title="Istio 1.1.17 patch release." href=/v1.3/news/2019/announcing-1.1.17/>Announcing Istio 1.1.17</a></li><li role=none><a role=treeitem title="Istio 1.1 end of life announcement." href=/v1.3/news/2019/announcing-1.1-eol-final/>Support for Istio 1.1 has ended</a></li><li role=none><a role=treeitem title="Istio 1.3.3 release announcement." href=/v1.3/news/2019/announcing-1.3.3/>Announcing Istio 1.3.3</a></li><li role=none><a role=treeitem title="Istio 1.1.16 patch release." href=/v1.3/news/2019/announcing-1.1.16/>Announcing Istio 1.1.16</a></li><li role=none><a role=treeitem title="Istio 1.2.7 patch release." href=/v1.3/news/2019/announcing-1.2.7/>Announcing Istio 1.2.7</a></li><li role=none><a role=treeitem title="Istio 1.3.2 patch release." href=/v1.3/news/2019/announcing-1.3.2/>Announcing Istio 1.3.2</a></li><li role=none><a role=treeitem title="Security vulnerability disclosure for CVE-2019-15226." href=/v1.3/news/2019/istio-security-2019-005/>Security Update - ISTIO-SECURITY-2019-005</a></li><li role=none><a role=treeitem title="Istio 1.3.1 release announcement." href=/v1.3/news/2019/announcing-1.3.1/>Announcing Istio 1.3.1</a></li><li role=none><a role=treeitem title="Istio 1.2.6 patch release." href=/v1.3/news/2019/announcing-1.2.6/>Announcing Istio 1.2.6</a></li><li role=none><a role=treeitem title="Istio 1.1.15 patch release." href=/v1.3/news/2019/announcing-1.1.15/>Announcing Istio 1.1.15</a></li><li role=none><a role=treeitem title="Istio 1.3 release announcement." href=/v1.3/news/2019/announcing-1.3/>Announcing Istio 1.3</a></li><li role=none><a role=treeitem title="An erroneous 1.2.4 sidecar image was available due to a faulty release operation." href=/v1.3/news/2019/incorrect-sidecar-image-1.2.4/>Istio 1.2.4 sidecar image vulnerability</a></li><li role=none><a role=treeitem title="Istio 1.1.14 patch release." href=/v1.3/news/2019/announcing-1.1.14/>Announcing Istio 1.1.14</a></li><li role=none><a role=treeitem title="Istio 1.2.5 patch release." href=/v1.3/news/2019/announcing-1.2.5/>Announcing Istio 1.2.5</a></li><li role=none><a role=treeitem title="Upcoming Istio 1.1 end of life announcement." href=/v1.3/news/2019/announcing-1.1-eol/>Support for Istio 1.1 ends on September 19th, 2019</a></li><li role=none><a role=treeitem title="Istio 1.1.13 patch release." href=/v1.3/news/2019/announcing-1.1.13/>Announcing Istio 1.1.13</a></li><li role=none><a role=treeitem title="Istio 1.2.4 patch release." href=/v1.3/news/2019/announcing-1.2.4/>Announcing Istio 1.2.4</a></li><li role=none><a role=treeitem title="Security vulnerability disclosure for multiple CVEs." href=/v1.3/news/2019/istio-security-003-004/>Security Update - ISTIO-SECURITY-2019-003 and ISTIO-SECURITY-2019-004</a></li><li role=none><a role=treeitem title="Istio 1.1.12 patch release." href=/v1.3/news/2019/announcing-1.1.12/>Announcing Istio 1.1.12</a></li><li role=none><a role=treeitem title="Istio 1.2.3 patch release." href=/v1.3/news/2019/announcing-1.2.3/>Announcing Istio 1.2.3</a></li><li role=none><a role=treeitem title="Istio 1.1.11 patch release." href=/v1.3/news/2019/announcing-1.1.11/>Announcing Istio 1.1.11</a></li><li role=none><a role=treeitem title="Istio 1.0.9 patch release." href=/v1.3/news/2019/announcing-1.0.9/>Announcing Istio 1.0.9</a></li><li role=none><a role=treeitem title="Istio 1.1.10 patch release." href=/v1.3/news/2019/announcing-1.1.10/>Announcing Istio 1.1.10</a></li><li role=none><a role=treeitem title="Istio 1.2.2 patch release." href=/v1.3/news/2019/announcing-1.2.2/>Announcing Istio 1.2.2</a></li><li role=none><a role=treeitem title="Security vulnerability disclosure for CVE-2019-12995." href=/v1.3/news/2019/cve-2019-12995/>Security Update - CVE-2019-12995</a></li><li role=none><a role=treeitem title="Istio 1.2.1 patch release." href=/v1.3/news/2019/announcing-1.2.1/>Announcing Istio 1.2.1</a></li><li role=none><a role=treeitem title="Istio 1.0 end of life announcement." href=/v1.3/news/2019/announcing-1.0-eol-final/>Support for Istio 1.0 has ended</a></li><li role=none><a role=treeitem title="Istio 1.2 release announcement." href=/v1.3/news/2019/announcing-1.2/>Announcing Istio 1.2</a></li><li role=none><a role=treeitem title="Istio 1.1.9 patch release." href=/v1.3/news/2019/announcing-1.1.9/>Announcing Istio 1.1.9</a></li><li role=none><a role=treeitem title="Istio 1.0.8 patch release." href=/v1.3/news/2019/announcing-1.0.8/>Announcing Istio 1.0.8</a></li><li role=none><a role=treeitem title="Istio 1.1.8 patch release." href=/v1.3/news/2019/announcing-1.1.8/>Announcing Istio 1.1.8</a></li><li role=none><a role=treeitem title="Security vulnerability disclosure for CVE-2019-12243." href=/v1.3/news/2019/cve-2019-12243/>Security Update - CVE-2019-12243</a></li><li role=none><a role=treeitem title="Upcoming Istio 1.0 end of life announcement." href=/v1.3/news/2019/announcing-1.0-eol/>Support for Istio 1.0 ends on June 19th, 2019</a></li><li role=none><a role=treeitem title="Istio 1.1.7 patch release." href=/v1.3/news/2019/announcing-1.1.7/>Announcing Istio 1.1.7</a></li><li role=none><a role=treeitem title="Istio 1.1.6 patch release." href=/v1.3/news/2019/announcing-1.1.6/>Announcing Istio 1.1.6</a></li><li role=none><a role=treeitem title="Istio 1.1.5 patch release." href=/v1.3/news/2019/announcing-1.1.5/>Announcing Istio 1.1.5</a></li><li role=none><a role=treeitem title="Istio 1.1.4 patch release." href=/v1.3/news/2019/announcing-1.1.4/>Announcing Istio 1.1.4</a></li><li role=none><a role=treeitem title="Istio 1.1.3 patch release." href=/v1.3/news/2019/announcing-1.1.3/>Announcing Istio 1.1.3</a></li><li role=none><a role=treeitem title="Istio 1.0.7 patch releases." href=/v1.3/news/2019/announcing-1.0.7/>Announcing Istio 1.0.7 with Important Security Update</a></li><li role=none><a role=treeitem title="Istio 1.1.2 patch release." href=/v1.3/news/2019/announcing-1.1.2/>Announcing Istio 1.1.2 with Important Security Update</a></li><li role=none><a role=treeitem title="Istio 1.1.1 patch release." href=/v1.3/news/2019/announcing-1.1.1/>Announcing Istio 1.1.1</a></li><li role=none><span role=treeitem class=current title="Istio 1.1 release announcement.">Announcing Istio 1.1</span></li><li role=none><a role=treeitem title="Istio 1.0.6 patch release." href=/v1.3/news/2019/announcing-1.0.6/>Announcing Istio 1.0.6</a></li><li role=none><a role=treeitem title="Istio has a new discussion board." href=/v1.3/news/2019/announcing-discuss.istio.io/>Announcing discuss.istio.io</a></li></ul></div></div><div class=card><button class="header dynamic" id=card1 title="News items for 2018." aria-controls=card1-body><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#newspaper"/></svg>2018 News</button><div class=body aria-labelledby=card1 role=region id=card1-body><ul role=tree aria-expanded=true class=leaf-section aria-labelledby=card1><li role=none><a role=treeitem title="Istio 1.0.5 patch release." href=/v1.3/news/2018/announcing-1.0.5/>Announcing Istio 1.0.5</a></li><li role=none><a role=treeitem title="Istio 1.0.4 patch release." href=/v1.3/news/2018/announcing-1.0.4/>Announcing Istio 1.0.4</a></li><li role=none><a role=treeitem title="Istio 1.0.3 patch release." href=/v1.3/news/2018/announcing-1.0.3/>Announcing Istio 1.0.3</a></li><li role=none><a role=treeitem title="Istio 1.0.2 patch release." href=/v1.3/news/2018/announcing-1.0.2/>Announcing Istio 1.0.2</a></li><li role=none><a role=treeitem title="Istio 1.0.1 patch release." href=/v1.3/news/2018/announcing-1.0.1/>Announcing Istio 1.0.1</a></li><li role=none><a role=treeitem title="Istio is ready for production use with its 1.0 release." href=/v1.3/news/2018/announcing-1.0/>Announcing Istio 1.0</a></li><li role=none><a role=treeitem title="Istio 0.8 announcement." href=/v1.3/news/2018/announcing-0.8/>Announcing Istio 0.8</a></li><li role=none><a role=treeitem title="Istio 0.7 announcement." href=/v1.3/news/2018/announcing-0.7/>Announcing Istio 0.7</a></li><li role=none><a role=treeitem title="Istio 0.6 announcement." href=/v1.3/news/2018/announcing-0.6/>Announcing Istio 0.6</a></li><li role=none><a role=treeitem title="Istio 0.5 announcement." href=/v1.3/news/2018/announcing-0.5/>Announcing Istio 0.5</a></li></ul></div></div><div class=card><button class="header dynamic" id=card2 title="News items for 2017." aria-controls=card2-body><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#newspaper"/></svg>2017 News</button><div class=body aria-labelledby=card2 role=region id=card2-body><ul role=tree aria-expanded=true class=leaf-section aria-labelledby=card2><li role=none><a role=treeitem title="Istio 0.4 announcement." href=/v1.3/news/2017/announcing-0.4/>Announcing Istio 0.4</a></li><li role=none><a role=treeitem title="Istio 0.3 announcement." href=/v1.3/news/2017/announcing-0.3/>Announcing Istio 0.3</a></li><li role=none><a role=treeitem title="Istio 0.2 announcement." href=/v1.3/news/2017/announcing-0.2/>Announcing Istio 0.2</a></li><li role=none><a role=treeitem title="Istio 0.1 announcement." href=/v1.3/news/2017/announcing-0.1/>Introducing Istio</a></li></ul></div></div></div></nav></div><div class=article-container><button tabindex=-1 id=sidebar-toggler title="Toggle the navigation bar"><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#pull"/></svg></button><nav aria-label=Breadcrumb><ol><li><a href=/v1.3/ title="Connect, secure, control, and observe services.">Istio</a></li><li><a href=/v1.3/news/ title="Timely news about the Istio project.">News</a></li><li><a href=/v1.3/news/2019/ title="News items for 2019.">2019 News</a></li><li>Announcing Istio 1.1</li></ol></nav><article aria-labelledby=title><div class=title-area><div><h1 id=title>Announcing Istio 1.1</h1><p class=subtitle>Major Update</p><p class=byline><span>By</span>
<span class=attribution>The Istio Team</span><span> | </span><span><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#calendar"/></svg><span>&nbsp;</span>March 19, 2019</span><span> | </span><span title="1664 words"><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#clock"/></svg><span>&nbsp;</span>8 minute read</span></p></div></div><nav class=toc-inlined aria-label="Table of Contents"><div><hr><ol><li role=none aria-label="Release notes"><a href=#release-notes>Release notes</a><ol><li role=none aria-label="Incompatible changes from 1.0"><a href=#incompatible-changes-from-1-0>Incompatible changes from 1.0</a><li role=none aria-label=Upgrades><a href=#upgrades>Upgrades</a><li role=none aria-label=Installation><a href=#installation>Installation</a><li role=none aria-label="Traffic management"><a href=#traffic-management>Traffic management</a><li role=none aria-label=Security><a href=#security>Security</a><li role=none aria-label="Policies and telemetry"><a href=#policies-and-telemetry>Policies and telemetry</a><li role=none aria-label="Configuration management"><a href=#configuration-management>Configuration management</a><li role=none aria-label="istioctl and kubectl"><a href=#istioctl-and-kubectl><code>istioctl</code> and <code>kubectl</code></a></ol></li></ol><hr></div></nav><p>We are pleased to announce the release of Istio 1.1!</p><div class=call-to-action><button class="btn update-notice" data-title="Update Notice" data-downloadhref=https://github.com/istio/istio/releases/tag/1.1.0 data-updateadvice="Before you download 1.1, you should know that there's a newer patch release with the latest bug fixes and perf improvements." data-updatebutton="LEARN ABOUT ISTIO 1.1.17" data-updatehref=/v1.3/news/2019/announcing-1.1.17/>
DOWNLOAD 1.1</button>
<a class=btn href=https://archive.istio.io/v1.1>1.1 DOCS</a></div><p>Since we released 1.0 back in July, we’ve done a lot of work to help people get
into production. Not surprisingly, we had to do some <a href=/v1.3/news>patch releases</a>
(6 so far!), but we’ve also been hard at work adding new features to the
product.</p><p>The theme for 1.1 is Enterprise Ready. We’ve been very pleased to see more and
more companies using Istio in production, but as some larger companies tried to
adopt Istio they hit some limits.</p><p>One of our prime areas of focus has been <a href=/v1.3/docs/concepts/performance-and-scalability/>performance and scalability</a>.
As people moved into production with larger clusters running more services at
higher volume, they hit some scaling and performance issues. The
<a href=/v1.3/docs/concepts/traffic-management/#sidecars>sidecars</a> took too many resources
and added too much latency. The control plane (especially
<a href=/v1.3/docs/concepts/traffic-management/#pilot>Pilot</a>) was overly
resource hungry.</p><p>We’ve done a lot of work to make both the data plane and the control plane more
efficient. You can find the details of our 1.1 performance testing and the
results in our updated <a href=/v1.3/docs/concepts/performance-and-scalability/>performance ans scalability concept</a>.</p><p>We’ve done work around namespace isolation as well. This lets you use
Kubernetes namespaces to enforce boundaries of control, and ensures that your
teams cannot interfere with each other.</p><p>We have also improved the <a href=/v1.3/docs/concepts/deployment-models/>multicluster capabilities and usability</a>.
We listened to the community and improved defaults for traffic control and
policy. We introduced a new component called
<a href=/v1.3/docs/concepts/what-is-istio/#galley>Galley</a>. Galley validates that sweet,
sweet YAML, reducing the chance of configuration errors. Galley will also be
instrumental in <a href=/v1.3/docs/setup/install/multicluster/>multicluster setups</a>,
gathering service discovery information from each Kubernetes cluster. We are
also supporting additional multicluster topologies including different
<a href=/v1.3/docs/concepts/deployment-models/#control-plane-models>control plane models</a>
topologies without requiring a flat network.</p><p>There is lots more &ndash; see the <a href=/v1.3/news/2019/announcing-1.1/>release notes</a> for complete
details.</p><p>There is more going on in the project as well. We know that Istio has a lot of
moving parts and can be a lot to take on. To help address that, we recently
formed a <a href=https://github.com/istio/community/blob/master/WORKING-GROUPS.md#working-group-meetings>Usability Working Group</a>
(feel free to join). There is also a lot happening in the <a href=https://github.com/istio/community#community-meeting>Community
Meeting</a> (Thursdays at
<code>11 a.m.</code>) and in the <a href=https://github.com/istio/community/blob/master/WORKING-GROUPS.md>Working
Groups</a>. And
if you haven’t yet joined the conversation at
<a href=https://discuss.istio.io>discuss.istio.io</a>, head over, log in with your
GitHub credentials and join us!</p><p>We are grateful to everyone who has worked hard on Istio over the last few
months &ndash; patching 1.0, adding features to 1.1, and, lately, doing tons of
testing on 1.1. Thanks especially to those companies and users who worked with
us installing and upgrading to the early builds and helping us catch problems
before the release.</p><p>So: now’s the time! Grab 1.1, check out <a href=/v1.3/docs/>the updated documentation</a>,
<a href=/v1.3/docs/setup/>install it</a> and&hellip;happy meshing!</p><h2 id=release-notes>Release notes</h2><h3 id=incompatible-changes-from-1-0>Incompatible changes from 1.0</h3><p>In addition to the new features and improvements listed below, Istio 1.1 has introduced
a number of significant changes from 1.0 that can alter the behavior of applications.
A concise list of these changes can be found in the <a href=/v1.3/docs/setup/upgrade/notice>upgrade notice</a>.</p><h3 id=upgrades>Upgrades</h3><p>We recommend a manual upgrade of the control plane and data plane to 1.1. See
the <a href=/v1.3/docs/setup/upgrade/>upgrades documents</a> for more information.</p><div><aside class="callout warning"><div class=type><svg class="large-icon"><use xlink:href="/v1.3/img/icons.svg#callout-warning"/></svg></div><div class=content>Be sure to check out the <a href=/v1.3/docs/setup/upgrade/notice>upgrade notice</a> for a
concise list of things you should know before upgrading your deployment to Istio 1.1.</div></aside></div><h3 id=installation>Installation</h3><ul><li><p><strong>CRD Install Separated from Istio Install</strong>. Placed Istio’s Custom Resource
Definitions (CRDs) into the <code>istio-init</code> Helm chart. Placing the CRDs in
their own Helm chart preserves the data continuity of the custom resource
content during the upgrade process and further enables Istio to evolve beyond
a Helm-based installation.</p></li><li><p><strong>Installation Configuration Profiles</strong>. Added several installation
configuration profiles to simplify the installation process using well-known
and well-tested patterns. Learn more about the better user experience
afforded by the <a href=/v1.3/docs/setup/additional-setup/config-profiles/>installation profile feature</a>.</p></li><li><p><strong>Improved Multicluster Integration</strong>. Consolidated the 1.0 <code>istio-remote</code>
chart previously used for
<a href=/v1.3/docs/setup/install/multicluster/shared-vpn/>multicluster VPN</a> and
<a href=/v1.3/docs/setup/install/multicluster/shared-gateways/>multicluster split horizon</a> remote cluster installation
into the Istio Helm chart simplifying the operational experience.</p></li></ul><h3 id=traffic-management>Traffic management</h3><ul><li><p><strong>New <code>Sidecar</code> Resource</strong>. The new <a href=/v1.3/docs/concepts/traffic-management/#sidecars>sidecar</a> resource
enables more fine-grained control over the behavior of the sidecar proxies attached to workloads within a namespace.
In particular it adds support to limit the set of services a sidecar will send traffic to.
This reduces the amount of configuration computed and transmitted to
the proxy, improving startup time, resource consumption and control-plane scalability.
For large deployments, we recommend adding a sidecar resource per namespace. Controls are also
provided for ports, protocols and traffic capture for advanced use-cases.</p></li><li><p><strong>Restrict Visibility of Services</strong>. Added the new <code>exportTo</code> feature which allows
service owners to control which namespaces can reference their services. This feature is
added to <code>ServiceEntry</code>, <code>VirtualService</code> and is also supported on a Kubernetes Service via the
<code>networking.istio.io/exportTo</code> annotation.</p></li><li><p><strong>Namespace Scoping</strong>. When referring to a <code>VirtualService</code> in a Gateway we use DNS based name matching
in our configuration model. This can be ambiguous when more than one namespace defines a virtual service
for the same host name. To resolve ambiguity it is now possible to explicitly scope these references
by namespace using a syntax of the form <strong><code>[{namespace-name}]/{hostname-match}</code></strong> in the <code>hosts</code> field.
The equivalent capability is also available in <code>Sidecar</code> for egress.</p></li><li><p><strong>Updates to <code>ServiceEntry</code> Resources</strong>. Added support to specify the
locality of a service and the associated SAN to use with mutual TLS. Service
entries with HTTPS ports no longer need an additional virtual service to
enable SNI-based routing.</p></li><li><p><strong>Locality-Aware Routing</strong>. Added full support for routing to services in the
same locality before picking services in other localities.
See <a href=/v1.3/docs/reference/config/istio.mesh.v1alpha1/#LocalityLoadBalancerSetting>Locality Load Balancer Settings</a></p></li><li><p><strong>Refined Multicluster Routing</strong>. Simplified the multicluster setup and
enabled additional deployment modes. You can now connect multiple clusters
simply using their ingress gateways without needing pod-level VPNs, deploy
control planes in each cluster for high-availability cases, and span a
namespace across several clusters to create global namespaces. Locality-aware
routing is enabled by default in the high-availability control plane
solution.</p></li><li><p><strong>Istio Ingress Deprecated</strong>. Removed the previously deprecated Istio
ingress. Refer to the <a href=/v1.3/docs/tasks/traffic-management/ingress/ingress-certmgr/>Securing Kubernetes Ingress with Cert-Manager</a>
example for more details on how to use Kubernetes Ingress resources with
<a href=/v1.3/docs/concepts/traffic-management/#gateways>gateways</a>.</p></li><li><p><strong>Performance and Scalability Improvements</strong>. Tuned the performance and
scalability of Istio and Envoy. Read more about <a href=/v1.3/docs/concepts/performance-and-scalability/>Performance and Scalability</a>
enhancements.</p></li><li><p><strong>Access Logging Off by Default</strong>. Disabled the access logs for all Envoy
sidecars by default to improve performance.</p></li></ul><h3 id=security>Security</h3><ul><li><p><strong>Readiness and Liveness Probes</strong>. Added support for Kubernetes&rsquo; HTTP
<a href=/v1.3/faq/security/#k8s-health-checks>readiness and liveness probes</a> when
mutual TLS is enabled.</p></li><li><p><strong>Cluster RBAC Configuration</strong>. Replaced the <code>RbacConfig</code> resource with the
<code>ClusterRbacConfig</code> resource to implement the correct cluster scope. See
<a href=https://archive.istio.io/v1.1/docs/setup/kubernetes/upgrade/steps/#migrating-from-rbacconfig-to-clusterrbacconfig>Migrating <code>RbacConfig</code> to <code>ClusterRbacConfig</code></a>.
for migration instructions.</p></li><li><p><strong>Identity Provisioning Through SDS</strong>. Added SDS support to provide stronger
security with on-node key generation and dynamic certificate rotation without
restarting Envoy. See <a href=/v1.3/docs/tasks/security/auth-sds>Provisioning Identity through SDS</a>
for more information.</p></li><li><p><strong>Authorization for TCP Services</strong>. Added support of authorization for TCP
services in addition to HTTP and gRPC services. See <a href=/v1.3/docs/tasks/security/authz-tcp>Authorization for TCP Services</a>
for more information.</p></li><li><p><strong>Authorization for End-User Groups</strong>. Added authorization based on <code>groups</code>
claim or any list-typed claims in JWT. See <a href=/v1.3/docs/tasks/security/rbac-groups/>Authorization for groups and list claims</a>
for more information.</p></li><li><p><strong>External Certificate Management on Ingress Gateway Controller</strong>.
Added a controller to dynamically load and rotate external certificates.</p></li><li><p><strong>Custom PKI Integration</strong>. Added Vault PKI integration with support for
Vault-protected signing keys and ability to integrate with existing Vault PKIs.</p></li><li><p><strong>Customized (non <code>cluster.local</code>) Trust Domains</strong>. Added support for
organization- or cluster-specific trust domains in the identities.</p></li></ul><h3 id=policies-and-telemetry>Policies and telemetry</h3><ul><li><p><strong>Policy Checks Off By Default</strong>. Changed policy checks to be turned off by
default to improve performance for most customer scenarios. <a href=/v1.3/docs/tasks/policy-enforcement/enabling-policy/>Enabling Policy Enforcement</a>
details how to turn on Istio policy checks, if needed.</p></li><li><p><strong>Kiali</strong>. Replaced the <a href=https://github.com/istio/istio/issues/9066>Service Graph addon</a>
with <a href=https://www.kiali.io>Kiali</a> to provide a richer visualization
experience. See the <a href=/v1.3/docs/tasks/telemetry/kiali/>Kiali task</a> for more
details.</p></li><li><p><strong>Reduced Overhead</strong>. Added several performance and scale improvements
including:</p><ul><li><p>Significant reduction in default collection of Envoy-generated
statistics.</p></li><li><p>Added load-shedding functionality to Mixer workloads.</p></li><li><p>Improved the protocol between Envoy and Mixer.</p></li></ul></li><li><p><strong>Control Headers and Routing</strong>. Added the option to create adapters to
influence the headers and routing of an incoming request. See the <a href=/v1.3/docs/tasks/policy-enforcement/control-headers>Control Headers and Routing</a>
task for more information.</p></li><li><p><strong>Out of Process Adapters</strong>. Added the out-of-process adapter functionality
for production use. As a result, we deprecated the in-process adapter model
in this release. All new adapter development should use the out-of-process
model moving forward.</p></li><li><p><strong>Tracing Improvements</strong>. Performed many improvements in our overall tracing
story:</p><ul><li><p>Trace ids are now 128 bit wide.</p></li><li><p>Added support for sending trace data to <a href=/v1.3/docs/tasks/telemetry/distributed-tracing/lightstep/>LightStep</a></p></li><li><p>Added the option to disable tracing for Mixer-backed services entirely.</p></li><li><p>Added policy decision-aware tracing.</p></li></ul></li><li><p><strong>Default TCP Metrics</strong>. Added default metrics for tracking TCP connections.</p></li><li><p><strong>Reduced Load Balancer Requirements for Addons</strong>. Stopped exposing addons
via separate load balancers. Instead, addons are exposed via the Istio
gateway. To expose addons externally using either HTTP or HTTPS protocols,
please use the <a href=/v1.3/docs/tasks/telemetry/gateways/>Addon Gateway documentation</a>.</p></li><li><p><strong>Secure Addon Credentials</strong>. Changed storage of the addon credentials.
Grafana, Kiali, and Jaeger passwords and username are now stored in
<a href=https://kubernetes.io/docs/concepts/configuration/secret/>Kubernetes secrets</a>
for improved security and compliance.</p></li><li><p><strong>More Flexibility with <code>statsd</code> Collector</strong>. Removed the built-in <code>statsd</code>
collector. Istio now supports bring your own <code>statsd</code> for
improved flexibility with existing Kubernetes deployments.</p></li></ul><h3 id=configuration-management>Configuration management</h3><ul><li><p><strong>Galley</strong>. Added <a href=/v1.3/docs/concepts/what-is-istio/#galley>Galley</a> as the
primary configuration ingestion and distribution mechanism within Istio. It
provides a robust model to validate, transform, and distribute configuration
states to Istio components insulating the Istio components from Kubernetes
details. Galley uses the <a href=https://github.com/istio/api/tree/release-1.3/mcp>Mesh Configuration Protocol (MCP)</a>
to interact with components.</p></li><li><p><strong>Monitoring Port</strong>. Changed Galley&rsquo;s default monitoring port from 9093 to
15014.</p></li></ul><h3 id=istioctl-and-kubectl><code>istioctl</code> and <code>kubectl</code></h3><ul><li><p><strong>Validate Command</strong>. Added the <a href=/v1.3/docs/reference/commands/istioctl/#istioctl-validate><code>istioctl validate</code></a>
command for offline validation of Istio Kubernetes resources.</p></li><li><p><strong>Verify-Install Command</strong>. Added the <a href=/v1.3/docs/reference/commands/istioctl/#istioctl-verify-install><code>istioctl verify-install</code></a>
command to verify the status of an Istio installation given a specified
installation YAML file.</p></li><li><p><strong>Deprecated Commands</strong>. Deprecated the <code>istioctl create</code>, <code>istioctl
replace</code>, <code>istioctl get</code>, and <code>istioctl delete</code> commands. Use the
<a href=https://kubernetes.io/docs/tasks/tools/install-kubectl><code>kubectl</code></a>
equivalents instead. Deprecated the <code>istioctl gen-deploy</code> command too. Use a
<a href=/v1.3/docs/setup/install/helm/#option-1-install-with-helm-via-helm-template><code>helm template</code></a>
instead. Release 1.2 will remove these commands.</p></li><li><p><strong>Short Commands</strong>. Included short commands in <code>kubectl</code> for gateways,
virtual services, destination rules and service entries.</p></li></ul></article><nav class=pagenav><div class=left><a title="Istio 1.1.1 patch release." href=/v1.3/news/2019/announcing-1.1.1/><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#left-arrow"/></svg>Announcing Istio 1.1.1</a></div><div class=right><a title="Istio 1.0.6 patch release." href=/v1.3/news/2019/announcing-1.0.6/>Announcing Istio 1.0.6<svg class="icon"><use xlink:href="/v1.3/img/icons.svg#right-arrow"/></svg></a></div></nav><div id=endnotes-container aria-hidden=true><h2>Links</h2><ol id=endnotes></ol></div></div><div class=toc-container><nav class=toc aria-label="Table of Contents"><div id=toc><ol><li role=none aria-label="Release notes"><a href=#release-notes>Release notes</a><ol><li role=none aria-label="Incompatible changes from 1.0"><a href=#incompatible-changes-from-1-0>Incompatible changes from 1.0</a><li role=none aria-label=Upgrades><a href=#upgrades>Upgrades</a><li role=none aria-label=Installation><a href=#installation>Installation</a><li role=none aria-label="Traffic management"><a href=#traffic-management>Traffic management</a><li role=none aria-label=Security><a href=#security>Security</a><li role=none aria-label="Policies and telemetry"><a href=#policies-and-telemetry>Policies and telemetry</a><li role=none aria-label="Configuration management"><a href=#configuration-management>Configuration management</a><li role=none aria-label="istioctl and kubectl"><a href=#istioctl-and-kubectl><code>istioctl</code> and <code>kubectl</code></a></ol></li></ol></div></nav></div></main><footer><div class=user-links><a class=channel title="Go download Istio 1.3.5 now" href=/v1.3/docs/setup#downloading-the-release aria-label="Download Istio"><span>download</span><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#download"/></svg>
</a><a class=channel title="Join the Istio discussion board to participate in discussions and get help troubleshooting problems" href=https://discuss.istio.io aria-label="Istio discussion board"><span>discuss</span><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#discourse"/></svg></a>
<a class=channel title="Stack Overflow is where you can ask questions and find curated answers on deploying, configuring, and using Istio" href=https://stackoverflow.com/questions/tagged/istio aria-label="Stack Overflow"><span>stack overflow</span><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#stackoverflow"/></svg></a>
<a class=channel title="Interactively discuss issues with the Istio community on Slack" href=https://istio.slack.com aria-label=slack><span>slack</span><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#slack"/></svg></a>
<a class=channel title="Follow us on Twitter to get the latest news" href=https://twitter.com/IstioMesh aria-label=Twitter><span>twitter</span><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#twitter"/></svg></a><div class=tag>for everyone</div></div><div class=info><p class=copyright>Istio Archive
1.3.5<br>&copy; 2019 Istio Authors, <a href=https://policies.google.com/privacy>Privacy Policy</a><br>Archived on November 14, 2019</p></div><div class=dev-links><a class=channel title="GitHub is where development takes place on Istio code" href=https://github.com/istio/community aria-label=GitHub><span>github</span><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#github"/></svg></a>
<a class=channel title="Access our team drive if you'd like to take a look at the Istio technical design documents" href=https://groups.google.com/forum/#!forum/istio-team-drive-access aria-label="team drive"><span>drive</span><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#drive"/></svg></a>
<a class=channel title="If you'd like to contribute to the Istio project, consider participating in our working groups" href=https://github.com/istio/community/blob/master/WORKING-GROUPS.md aria-label="working groups"><span>working groups</span><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#working-groups"/></svg></a><div class=tag>for developers</div></div></footer><script src=https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js defer></script><div id=scroll-to-top-container aria-hidden=true><button id=scroll-to-top title="Back to top"><svg class="icon"><use xlink:href="/v1.3/img/icons.svg#top"/></svg></button></div></body></html>
Reference in New Issue View Git Blame Copy Permalink