Istio add-on change log
View information for patch and minor version updates to the managed Istio add-on in your IBM Cloud® Kubernetes Service Kubernetes clusters.
- Patch updates: IBM Cloud keeps all your Istio components up-to-date by automatically rolling out patch updates to the most recent version of Istio that is supported by IBM Cloud Kubernetes Service. You can check the patch version
of your add-on by running
kubectl get iop managed-istio -n ibm-operators -o jsonpath='{.metadata.annotations.version}'
. - Minor version updates: To update your Istio components to the most recent minor version of Istio that is supported by IBM Cloud Kubernetes Service, such as from version 1.8 to 1.9, follow the steps in Updating the minor version of the Istio add-on.
When a minor version (
n
) of the Istio add-on is released, 1 minor version behind (n-1
) is supported for typically 6 weeks after the latest version release date. istioctl
and sidecar updates: Whenever the managed Istio add-on is updated, make sure that you update youristioctl
client and the Istio sidecars for your app to match the Istio version of the add-on. You can check whether the versions of youristioctl
client and the Istio add-on control plane match by runningistioctl version
.
To view a list of add-ons and the supported cluster versions, run the following command or see the Supported cluster add-on versions.
ibmcloud ks cluster addon versions
Version 1.23
Change log for 1.23.2, released 9 Oct 2024
Review the changes that are included in version 1.23.2 of the managed Istio add-on.
- Previous version
- 1.23.1
- Current version
- 1.23.2
- Updates in this version
- See the Istio release notes for Istio 1.23.2.
Change log for 1.23.1, released 20 September 2024
Review the changes that are included in version 1.23.1 of the managed Istio add-on.
- Previous version
- 1.22.4
- Current version
- 1.23.1
- Updates in this version
- See the Istio release notes for Istio 1.23.0 and Istio 1.23.1.
- Resolves the following CVEs:
Version 1.22
Change log for 1.22.4, released 18 August 2024
Review the changes that are included in version 1.22.4 of the managed Istio add-on.
- Previous version
- 1.22.3
- Current version
- 1.22.4
- Updates in this version
- See the Istio release notes for Istio 1.22.4.
- Resolves the following CVEs:
Change log for 1.22.3, released 20 August 2024
Review the changes that are included in version 1.22.3 of the managed Istio add-on.
- Previous version
-
1.22.1
- Current version
-
1.22.3
- Updates in this version
-
See the Istio release notes for Istio 1.22.2 and Istio 1.22.3.
-
Resolves the following CVEs:
-
For more information, see the Istio security bulletin 2024-005.
Change log for 1.22.1, released 21 June 2024
Review the changes that are included in version 1.22.1 of the managed Istio add-on.
- Previous version
- 1.21.3
- Current version
- 1.22.1
- Updates in this version
- See the Istio release notes for Istio 1.22.0 and Istio 1.22.1.
Version 1.21
Change log for 1.21.6, released 9 Oct 2024
Review the changes that are included in version 1.21.6 of the managed Istio add-on.
- Previous version
- 1.21.5
- Current version
- 1.21.6
- Updates in this version
- This is the final version of addon-istio 1.21 Addon-istio 1.21 is unsupported on 13 November 2024.
- See the Istio release notes for Istio 1.21.6.
- Resolves the following CVEs:
Change log for 1.21.5, released 20 August 2024
Review the changes that are included in version 1.21.5 of the managed Istio add-on.
- Previous version
-
1.21.3
- Current version
-
1.21.5
- Updates in this version
-
See the Istio release notes for Istio 1.21.4 and Istio 1.21.5.
-
Resolves the following CVEs:
-
For more information, see the Istio security bulletin 2024-005.
Change log for 1.21.3, released 19 June 2024
Review the changes that are included in version 1.21.3 of the managed Istio add-on.
- Previous version
-
1.21.2
- Current version
-
1.21.3
- Updates in this version
-
See the Istio release notes for Istio 1.21.3.
-
Resolves the following CVEs:
-
For more information, see the Istio security bulletin 2024-004
Change log for 1.21.2, released 8 May 2024
Review the changes that are included in version 1.21.2 of the managed Istio add-on.
- Previous version
- 1.21.1
- Current version
- 1.21.2
- Updates in this version
- For more information, see the Istio security bulletin 2024-003.
- See the Istio release notes for Istio 1.21.2.
- Resolves the following CVEs:
- USN-6733-1
- CVE-2024-28835
- CVE-2024-28834
Change log for 1.21.1, released 26 April 2024
Review the changes that are included in version 1.21.1 of the managed Istio add-on.
- Previous version
- 1.20.5
- Current version
- 1.21.1
- Updates in this version
- See the Istio release notes for Istio 1.21.0 and Istio 1.21.1.
Addon-Istio
no longer deletes themanaged-istio
IOP when you disable the add-on. If you choose to disableaddon-istio
, you can choose between uninstalling or no longer managing Istio. See the Setting up Istio documentation for more information.
Version 1.20
Change log for 1.20.8, released 20th August 2024
Review the changes that are included in version 1.20.8 of the managed Istio add-on.
- Previous version
- 1.20.7
- Current version
- 1.20.8
- Updates in this version
- This is the final version of addon-istio 1.20. Addon-istio 1.20 is unsupported on 18 September 2024.
- See the Istio release notes for Istio 1.20.8.
- Resolves the following CVEs:
Change log for 1.20.7, released 19 June 2024
Review the changes that are included in version 1.20.7 of the managed Istio add-on.
- Previous version
-
1.20.6
- Current version
-
1.20.7
- Updates in this version
-
See the Istio release notes for Istio 1.20.7.
-
Resolves the following CVEs:
-
For more information, see the Istio security bulletin 2024-004
Change log for 1.20.6, released 8 May 2024
Review the changes that are included in version 1.20.6 of the managed Istio add-on.
- Previous version
- 1.20.5
- Current version
- 1.20.6
- Updates in this version
- For more information, see the Istio security bulletin 2024-003.
- See the Istio release notes for Istio 1.20.6.
- Resolves the following CVEs:
- USN-6733-1
- CVE-2024-28835
- CVE-2024-28834
Change log for 1.20.5, released 24 April 2024
Review the changes that are included in version 1.20.5 of the managed Istio add-on.
- Previous version
-
1.20.4
- Current version
-
1.20.5
- Updates in this version
-
For more information, see the Istio security bulletin 2024-002.
-
See the Istio release notes for Istio 1.20.5.
-
Resolves the following CVEs:
Change log for 1.20.4, released 03 April 2024
Review the changes that are included in version 1.20.4 of the managed Istio add-on.
- Previous version
- 1.20.3
- Current version
- 1.20.4
- Updates in this version
- Uninstalling
Addon-Istio
no longer deletes theistio-system
namespace. This cleanup became unnecessary over time. - See the Istio release notes for Istio 1.20.4.
- Resolves the following CVEs:
Change log for 1.20.3, released 06 March 2024
Review the changes that are included in version 1.20.3 of the managed Istio add-on.
- Previous version
- 1.20.2
- Current version
- 1.20.3
- Updates in this version
- See the Istio release notes for Istio 1.20.3.
- Resolves the following CVEs:
Change log for 1.20.2, released 07 February 2024
Review the changes that are included in version 1.20.2 of the managed Istio add-on.
- Previous version
- 1.20.1
- Current version
- 1.20.2
- Updates in this version
- For more information, see the Istio 1.20.2 release notes.
- Resolves the following CVEs:
Change log for 1.20.1, released 10 January 2024
Review the changes that are included in version 1.20.1 of the managed Istio add-on.
- Previous version
- 1.20.0
- Current version
- 1.20.1
- Updates in this version
- For more information, see the Istio security bulletin 2023-005.
- See the Istio release notes for Istio 1.20.1.
- Resolves the following CVEs:
Change log for 1.20.0, released 7 December 2023
Review the changes that are included in version 1.20.0 of the managed Istio add-on.
- Previous version
- 1.19.4
- Current version
- 1.20.0
- Updates in this version
- See the Istio release notes for Istio 1.20.0.
Version 1.19
Change log for 1.19.9, released 24 April 2024
Review the changes that are included in version 1.19.9 of the managed Istio add-on.
- Previous version
- 1.19.8
- Current version
- 1.19.9
- Updates in this version
- This is the final version of addon-istio 1.19. Addon-istio 1.19 is unsupported on 08 May 2024.
- For more information, see the Istio security bulletin 2024-002.
- See the Istio release notes for Istio 1.19.9.
- Resolves the following CVEs:
Change log for 1.19.8, released 03 April 2024
Review the changes that are included in version 1.19.8 of the managed Istio add-on.
- Previous version
- 1.19.7
- Current version
- 1.19.8
- Updates in this version
- This version is the final version of
Addon-Istio
1.19.Addon-Istio
1.19 is unsupported on 8 May 2024. - Uninstalling
Addon-Istio
no longer deletes theistio-system
namespace. This cleanup became unnecessary over time. - See the Istio release notes for Istio 1.19.8.
- Resolves the following CVEs:
Change log for 1.19.7, released 06 March 2024
Review the changes that are included in version 1.19.7 of the managed Istio add-on.
- Previous version
- 1.19.6
- Current version
- 1.19.7
- Updates in this version
- See the Istio release notes for Istio 1.19.7.
- Resolves the following CVEs:
Change log for 1.19.6, released 07 February 2024
Review the changes that are included in version 1.19.6 of the managed Istio add-on.
- Previous version
- 1.19.5
- Current version
- 1.19.6
- Updates in this version
- See the Istio 1.19.6 release notes.
- Resolves the following CVEs:
Change log for 1.19.5, released 10 January 2024
Review the changes that are included in version 1.19.5 of the managed Istio add-on.
- Previous version
- 1.19.4
- Current version
- 1.19.5
- Updates in this version
- For more information, see the Istio security bulletin 2023-005.
- See the Istio release notes for Istio 1.19.5.
- Resolves the following CVEs:
Change log for 1.19.4, released 5 December 2023
Review the changes that are included in version 1.19.4 of the managed Istio add-on.
- Previous version
- 1.19.3
- Current version
- 1.19.4
- Updates in this version
- See the Istio release notes for Istio 1.19.64.
- Resolves the following CVEs:
Change log for 1.19.3, released 10 October 2023
Review the changes that are included in version 1.19.3 of the managed Istio add-on.
- Previous version
- 1.18.3
- Current version
- 1.19.3
- Updates in this version
- For more information, see the Istio security bulletin 2023-004
- See the Istio release notes for Istio 1.19.3.
- Upstream announcement for Istio 1.19.0.
- Addon-Istio does not support ambient mesh at this time
Unsupported: Version 1.18
Change log for 1.18.7, released 07 February 2024
Review the changes that are included in version 1.18.7 of the managed Istio add-on.
- Previous version
- 1.18.6
- Current version
- 1.18.7
- Updates in this version
- This version is the EOL version for 1.18. Support for Istio 1.18 ends on 21 February 2024.
- See the Istio release notes for Istio 1.18.7.
- Resolves the following CVEs:
Change log for 1.18.6, released 10 January 2024
Review the changes that are included in version 1.18.6 of the managed Istio add-on.
- Previous version
- 1.18.5
- Current version
- 1.18.6
- Updates in this version
- See the Istio release notes for Istio 1.18.6.
- For more information, see the Istio security bulletin 2023-005.
- Resolves the following CVEs:
- USN-6517-1
- CVE-2022-48522
- CVE-2023-47038
- USN-6450-1
- CVE-2023-2975
- CVE-2023-5363
- USN-6435-1
- CVE-2023-3446
- CVE-2023-3817
- USN-6467-1
- CVE-2023-36054
- USN-6429-1
- CVE-2023-38545
- CVE-2023-38546
- USN-6543-1
- CVE-2023-39804
- USN-6477-1
- CVE-2023-4016
- USN-6427-1
- CVE-2023-44487
- USN-6535-1
- CVE-2023-46218
- CVE-2023-46219
- USN-6541-1
- CVE-2023-4806
- CVE-2023-4813
- CVE-2023-5156
- USN-6499-1
- CVE-2023-5981
Change log for 1.18.5, released 18 October 2023
- Previous version
- 1.18.3
- Current version
- 1.18.5
- Updates in this version
- See the Istio release notes for Istio 1.18.5.
- Resolves CVE-2023-44487 and CVE-2023-39325.
- For more information, see the Istio security bulletin 2023-004.
Change log for 1.18.3, released 3 October 2023
Review the changes that are included in version 1.18.3 of the managed Istio add-on.
- Previous version
- 1.18.2
- Current version
- 1.18.3
- Updates in this version
- See the Istio release notes for Istio 1.18.3.
- Resolves the following CVEs:
Change log for 1.18.2, released 8 August 2023
Review the changes that are included in version 1.18.2 of the managed Istio add-on.
- Previous version
- 1.18.1
- Current version
- 1.18.2
- Updates in this version
- See the Istio release notes for Istio 1.18.2.
- For more information, see the Istio security bulletin 2023-003.
Change log for 1.18.1, released 27 July 2023
Review the changes that are included in version 1.18.1 of the managed Istio add-on. For more information, see the Istio security bulletin 2023-002.
- Previous version
- 1.18.0
- Current version
- 1.18.1
- Updates in this version
- See the Istio release notes for Istio 1.18.1.
- Resolves the following CVEs:
Change log for 1.18.0, released 12 July 2023
Review the changes that are included in version 1.18.0 of the managed Istio add-on.
- Previous version
- 1.17.3
- Current version
- 1.18.0
- Updates in this version
- See the Istio release notes for Istio 1.18.0.
- Adds an
enable-targeted-envoy-access-log
Envoy extension provider to the mesh config. You can use Telemetry CRs to enable Envoy access logs on specific workloads rather than enabling it for the entire mesh. For more information, see Observing Istio traffic. - Protocol sniffing is now enabled for Addon-Istio.
- Addon-Istio pods now have a
nodeAffinity
for amd64 architecture nodes. - Adjusts how
meshConfig
setsenableAutoMtls
,enableTracing
, andprotocolDetectionTimeout
to their current values. This results in a no operation change because the values are not changing. The only change is whether they are set implicitly or explicitly. - Sets the security context explicitly in the Istio Operator CR. This results in a no operation change because the values are not changing. The only change is whether they are set implicitly or explicitly.
- Resolves the following CVEs:
Unsupported: Version 1.17
Version 1.17 of the managed Istio add-on is unsupported.
Change log for 1.17.8, released 18 October 2023
- Previous version
- 1.17.6
- Current version
- 1.17.8
- Updates in this version
- See the Istio release notes for Istio 1.17.8.
- Resolves CVE-2023-44487 and CVE-2023-39325.
- For more information, see the Istio security bulletin 2023-004
Change log for 1.17.6, released 3 October 2023
Review the changes that are included in version 1.17.6 of the managed Istio add-on.
- Previous version
- 1.17.6
- Current version
- 1.17.5
- Updates in this version
- See the Istio release notes for Istio 1.17.6.
- Resolves the following CVEs:
Change log for 1.17.5, released 8 August 2023
Review the changes that are included in version 1.17.5 of the managed Istio add-on.
- Previous version
- 1.17.4
- Current version
- 1.17.5
- Updates in this version
- See the Istio release notes for Istio 1.17.5.
- For more information, see the Istio security bulletin 2023-003.
Change log for 1.17.4, released 27 July 2023
Review the changes that are included in version 1.17.4 of the managed Istio add-on. For more information, see the Istio security bulletin 2023-002.
- Previous version
- 1.17.3
- Current version
- 1.17.4
- Updates in this version
- See the Istio release notes for Istio 1.17.4.
- Resolves the following CVEs:
Change log for 1.17.3, released 22 June 2023
Review the changes that are included in version 1.17.3 of the managed Istio add-on.
- Previous version
- 1.17.2
- Current version
- 1.17.3
- Updates in this version
- See the Istio release notes for Istio 1.17.3.
- Resolves the following CVEs:
Change log for 1.17.2, released 20 April 2023
Review the changes that are included in version 1.17.2 of the managed Istio add-on.
- Previous version
- 1.17.1
- Current version
- 1.17.2
- Updates in this version
- See the Istio release notes for Istio 1.17.2 and the Istio security bulletin 2023-001
- Resolves the following CVEs:
- CVE-2023-27487
- CVE-2023-27488
- CVE-2023-27491
- CVE-2023-27492
- CVE-2023-27493
- CVE-2023-27496
- CVE-2023-27533
- CVE-2023-27534
- CVE-2023-27535
- CVE-2023-27536
- CVE-2023-27538
- CVE-2023-23914
- CVE-2023-23915
- CVE-2023-23916
- CVE-2023-0361
- CVE-2022-48303
- CVE-2023-27320
- usn-5964-1
- usn-5891-1
- usn-5901-1
- usn-5900-1
- usn-5908-1
Change log for 1.17.1, released 7 March 2023
Review the changes that are included in version 1.17.1 of the managed Istio add-on.
- Previous version
- 1.16.2
- Current version
- 1.17.1
- Updates in this version
- See the Istio release notes for Istio 1.17.1.
- Resolves the following CVEs:
Unsupported: Version 1.16
Version 1.16 of the managed Istio add-on is unsupported.
Change log for 1.16.7, released 8 August 2023
Review the changes that are included in version 1.16.7 of the managed Istio add-on.
- Previous version
- 1.16.6
- Current version
- 1.16.7
- Updates in this version
- See the Istio release notes for Istio 1.16.7.
- For more information, see the Istio security bulletin 2023-003.
Change log for 1.16.6, released 27 July 2023
Review the changes that are included in version 1.16.6 of the managed Istio add-on. For more information, see the Istio security bulletin 2023-002.
- Previous version
- 1.16.5
- Current version
- 1.16.6
- Updates in this version
- See the Istio release notes for Istio 1.16.6.
- Resolves the following CVEs:
Change log for 1.16.5, released 8 June 2022
Review the changes that are included in version 1.16.5 of the managed Istio add-on.
- Previous version
- 1.16.4
- Current version
- 1.16.5
- Updates in this version
- See the Istio release notes for Istio 1.16.5.
- Resolves the following CVEs:
Change log for 1.16.4, released 20 April 2023
Review the changes that are included in version 1.16.4 of the managed Istio add-on.
- Previous version
- 1.16.3
- Current version
- 1.16.4
- Updates in this version
- See the Istio release notes for Istio 1.16.4 and the Istio security bulletin 2023-001.
- Resolves the following CVEs:
- CVE-2023-27487
- CVE-2023-27488
- CVE-2023-27491
- CVE-2023-27492
- CVE-2023-27493
- CVE-2023-27496
- CVE-2023-27533
- CVE-2023-27534
- CVE-2023-27535
- CVE-2023-27536
- CVE-2023-27538
- CVE-2023-23914
- CVE-2023-23915
- CVE-2023-23916
- CVE-2023-0361
- CVE-2022-48303
- CVE-2023-27320
- usn-5964-1
- usn-5891-1
- usn-5901-1
- usn-5900-1
- usn-5908-1
Change log for 1.16.3, released 9 March 2023
Review the changes that are included in version 1.16.3 of the managed Istio add-on.
- Previous version
- 1.16.2
- Current version
- 1.16.3
- Updates in this version
- See the Istio release notes for Istio 1.16.3.
- Resolves the following CVEs:
Change log for 1.16.2, released 14 February 2023
Review the changes that are included in version 1.16.2 of the managed Istio add-on.
- Previous version
- 1.16.1
- Current version
- 1.16.2
- Updates in this version
- See the Istio release notes for Istio 1.16.2.
- Resolves the following CVEs:
Change log for 1.16.1, released 10 January 2023
- Previous version
- 1.16.0
- Current version
- 1.16.1
- Updates in this version
- See the Istio release notes for Istio 1.16.1.
- Fixes a
podAntiAffinity
label bug where the value was incorrect. - Adds support for Gateway API resource.
- Resolves the following CVEs:
Change log for 1.16.0, released November 30th, 2022
Review the changes that are included in version 1.16.0 of the managed Istio add-on.
- Previous version
- 1.15.3
- Current version
- 1.16.0
- Updates in this version
- See the Istio release notes for Istio 1.16.0.
- The Gateway API resource is now supported.
- Resolves the following CVEs:
Unsupported: Version 1.15
Version 1.15 of the managed Istio add-on is unsupported.
Change log for 1.15.6, released 9 March 2023
Review the changes that are included in version 1.15.6 of the managed Istio add-on.
- Previous version
- 1.15.5
- Current version
- 1.15.6
- Updates in this version
- See the Istio release notes for Istio 1.15.6.
- Resolves the following CVEs:
Change log for 1.15.5, released 14 February 2023
Review the changes that are included in version 1.15.5 of the managed Istio add-on.
- Previous version
- 1.15.4
- Current version
- 1.15.5
- Updates in this version
- See the Istio release notes for Istio 1.15.5.
- Resolves the following CVEs:
Change log for 1.15.4, released 10 January 2023
- Previous version
- 1.15.3
- Current version
- 1.15.4
- Updates in this version
- See the Istio release notes for Istio 1.15.4.
- Fixes a
podAntiAffinity
label bug where the value was incorrect. - Resolves the following CVEs:
Change log for 1.15.3, released 10 November 2022
Review the changes that are included in version 1.15.3 of the managed Istio add-on.
- Previous version
- 1.15.2
- Current version
- 1.15.3
- Updates in this version
- See the Istio release notes for Istio 1.15.3.
Change log for 1.15.2, released 25 October 2022
Review the changes that are included in version 1.15.2 of the managed Istio add-on.
- Previous version
- 1.15.1
- Current version
- 1.15.2
- Updates in this version
- See the Istio release notes for Istio 1.15.2.
- Resolves the following CVEs:
Change log for 1.15.1, released 11 October 2022
Review the changes that are included in version 1.15.1 of the managed Istio add-on.
- Previous version
- 1.15.0
- Current version
- 1.15.1
- Updates in this version
- See the Istio release notes for Istio 1.15.1.
- Fixes the Istio operator memory leak issue.
- Resolves the following CVEs:
Change log for 1.15.0, released 15 September 2022
Review the changes that are included in version 1.15.0 of the managed Istio add-on.
- Previous version
- 1.14.3
- Current version
- 1.15.0
- Updates in this version
- See the Istio release notes for Istio 1.15.0.
- Adds a 1 G memory limit and a 100 M memory request to the
add-on-istio-operator
deployment. This addition resolves an error in which a reconcile loop increased memory usage over time. Because of this change, your Istio operator pod might restart frequently. However, the frequent operator pod restarts do not affect Istio on the cluster and your Kubernetes deployment still matches what was specified in the IOPs. - Resolves the following CVEs:
Unsupported: Version 1.14
Version 1.14 of the managed Istio add-on is unsupported.
Change log for 1.14.6, released 10 January 2023
Review the changes that are included in version 1.14.6 of the managed Istio add-on.
- Previous version
- 1.14.5
- Current version
- 1.14.6
- Updates in this version
- See the Istio release notes for Istio 1.14.6.
- Fixes a
podAntiAffinity
label bug where the value was incorrect. - Resolves the following CVEs:
Change log for 1.14.5, released 25 October 2022
Review the changes that are included in version 1.14.5 of the managed Istio add-on.
- Previous version
- 1.14.4
- Current version
- 1.14.5
- Updates in this version
- See the Istio release notes for Istio 1.14.5.
- The istio operator memory leak is fixed in 1.14.5.
- Resolves the following CVEs:
Change log for 1.14.4, released 4 October 2022
Review the changes that are included in version 1.14.4 of the managed Istio add-on.
- Previous version
- 1.14.3
- Current version
- 1.14.4
- Updates in this version
- See the Istio release notes for Istio 1.14.4.
- Adds a 1G memory limit and a 100M memory request to the
add-on-istio-operator
deployment. This addition resolves an error in which a reconcile loop increased memory usage over time. Because of this change, your Istio operator pod might restart frequently. However, the frequent operator pod restarts do not affect Istio on the cluster and your Kubernetes deployment still matches what was specified in the IOPs. - Resolves the following CVEs:
Change log for 1.14.3, released 16 August 2022
Review the changes that are included in version 1.14.3 of the managed Istio add-on.
- Previous version
- 1.14.1
- Current version
- 1.14.3
- Updates in this version
- See the Istio release notes for Istio 1.14.3.
- Resolves the following CVEs:
Change log for 1.14.1, released 16 June 2022
Review the changes that are included in version 1.14.1 of the managed Istio add-on.
- Previous version
- 1.13.4
- Current version
- 1.14.1
- Updates in this version
- See the Istio release notes for Istio 1.14.1.
Unsupported: Version 1.13
Version 1.13 of the managed Istio add-on is unsupported.
Change log for 1.13.9, released 25 October 2022
Review the changes that are included in version 1.13.9 of the managed Istio add-on.
This is the final update for version 1.13, which becomes unsupported on 17 Nov 2022. You can update the minor version of the add-on from 1.12 to 1.13 for as long as 1.13 is supported. You can update the minor version of the add-on from 1.13 to 1.14 for as long as 1.14 is supported. For more information, see Upgrading the Istio add-on.
- Previous version
- 1.13.8
- Current version
- 1.13.9
- Updates in this version
- See the Istio release notes for Istio 1.13.9.
- Resolves the following CVEs:
Change log for 1.13.8, released 4 October 2022
Review the changes that are included in version 1.13.8 of the managed Istio add-on.
- Previous version
- 1.13.7
- Current version
- 1.13.8
- Updates in this version
- See the Istio release notes for Istio 1.13.8.
- Resolves the following CVEs:
Change log for 1.13.7, released 16 August 2022
Review the changes that are included in version 1.13.7 of the managed Istio add-on.
- Previous version
- 1.13.5
- Current version
- 1.13.7
- Updates in this version
- See the Istio release notes for Istio 1.13.7.
- Resolves the following CVEs:
Change log for 1.13.5, released 21 June 2022
Review the changes that are included in version 1.13.5 of the managed Istio add-on.
- Previous version
-
1.13.4
- Current version
-
1.13.5
- Updates in this version
-
See the Istio release notes for Istio 1.13.5.
-
Resolves the following CVEs:
-
For more information, see the Istio security bulletin 2022-005/
Change log for 1.13.4, released 1 June 2022
Review the changes that are included in version 1.13.4 of the managed Istio add-on.
- Previous version
- 1.13.3
- Current version
- 1.13.4
- Updates in this version
- See the Istio release notes for Istio 1.13.4.
- Resolves the following CVEs:
Change log for 1.13.3, released 3 May 2021
Review the changes that are included in version 1.13.3 of the managed Istio add-on.
- Previous version
-
1.13.2
- Current version
-
1.13.3
- Updates in this version
-
See the Istio release notes for Istio 1.13.3.
-
Resolves the following CVEs:
Change log for 1.13.2, released 22 March 2022
Review the changes that are included in version 1.13.2 of the managed Istio add-on.
- Previous version
-
1.13.1
- Current version
-
1.13.2
- Updates in this version
-
See the Istio release notes for Istio 1.13.2.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2022-004.
Change log for 1.13.1, released March 9th, 2021
Review the changes that are included in version 1.13.1 of the managed Istio add-on.
- Previous version
- 1.12.4
- Current version
- 1.13.1
- Updates in this version
- See the Istio release notes for Istio 1.13.1.
Version 1.12 (unsupported)
Version 1.12 of the managed Istio add-on is unsupported.
If you want to upgrade from Istio minor version 1.11 to version 1.12 and your Istio components were provisioned at version 1.10 or earlier, you must take steps to set up your mutating and validating webhooks before you upgrade. If you do not make these changes before upgrading to 1.12, the upgrade will stall.
Change log for 1.12.9, released 26 July 2022
Review the changes that are included in version 1.12.9 of the managed Istio add-on.
- Previous version
- 1.12.8
- Current version
- 1.12.9
- Updates in this version
- See the Istio release notes for Istio 1.12.9.
- Resolves the following CVEs:
Change log for 1.12.8, released 21 June 2022
Review the changes that are included in version 1.12.8 of the managed Istio add-on.
- Previous version
-
1.12.7
- Current version
-
1.12.8
- Updates in this version
-
See the Istio release notes for Istio 1.12.8.
-
Resolves the following CVEs:
-
For more information, see the Istio security bulletin 2022-005/
Change log for 1.12.7, released 19 May 2022
Review the changes that are included in version 1.12.7 of the managed Istio add-on.
- Previous version
-
1.12.6
- Current version
-
1.12.7
- Updates in this version
-
See the Istio release notes for Istio 1.12.7.
-
Resolves the following CVEs:
-
For more information, see the Istio security bulletin 2021-008
Change log for 1.12.6, released 19 April 2022
Review the changes that are included in version 1.12.6 of the managed Istio add-on.
- Previous version
-
1.12.5
- Current version
-
1.12.6
- Updates in this version
-
See the Istio release notes for Istio 1.12.6.
-
Resolves the following CVEs
Change log for 1.12.5, released 22 March 2022
Review the changes that are included in version 1.12.5 of the managed Istio add-on.
- Previous version
-
1.12.4
- Current version
-
1.12.5
- Updates in this version
-
See the Istio release notes for Istio 1.12.5.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2022-004.
Change log for 1.12.4, released 8 March 2022
Review the changes that are included in version 1.12.4 of the managed Istio add-on.
- Previous version
-
1.12.3
- Current version
-
1.12.4
- Updates in this version
-
See the Istio release notes for Istio 1.12.4.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2022-003.
Change log for 1.12.3, released 22 February 2021
Review the changes that are included in version 1.12.3 of the managed Istio add-on.
- Previous version
- 1.12.2
- Current version
- 1.12.3
- Updates in this version
- See the Istio release notes for Istio 1.12.3.
Change log for 1.12.2, released 03 February 2022
Review the changes that are included in version 1.12.2 of the managed Istio add-on.
- Previous version
-
1.12.1
- Current version
-
1.12.2
- Updates in this version
-
See the Istio release notes for Istio 1.12.2.
-
For more information, see the Istio security bulletin 2022-001 and Istio security bulletin 2022-002.
Change log for 1.12.1, released 13 January 2022
Review the changes that are included in version 1.12.1 of the managed Istio add-on.
- Previous version
- 1.12.0
- Current version
- 1.12.1
- Updates in this version
- See the Istio release notes for Istio 1.12.1.
Change log for 1.12.0, released 08 December 2021
- Previous version
-
1.11.4
- Current version
-
1.12.0
- Updates in this version
-
See the Istio release notes for Istio 1.12.0.
-
Updates the
managed-istio
operator settings. This includes aTERMINATION_DRAIN_DURATION
of 30 seconds which replaces an earlierpreStop
variable of 25 seconds. If you are already using aTERMINATION_DRAIN_DURATION
you must increase the value by 30 seconds to account for this change. -
Updates the affinity rules in the
k8s.overlay
tok8s.affinity
. If you are using custom gateways, review the updated configuration for the default gateways to see if you want to use the change in your custom gateways. -
Users can now increase the max horizontal pod autoscaler (HPA) pods for istiod. Do not change this value to less than the default of
5
. You can increase this value, but only in situations where you have a large service mesh. -
Resolves the following CVEs
Version 1.11 (unsupported)
Review the changes that are in version 1.11 of the managed Istio add-on.
Version 1.11 of the managed Istio add-on is unsupported.
Change log for 1.11.8, released 22 March 2022
Review the changes that are included in version 1.11.8 of the managed Istio add-on.
This is the final update for version 1.11, which becomes unsupported on 21 April 2022. You can update the minor version of the add-on from 1.10 to 1.11 for as long as 1.11 is supported. You can update the minor version of the add-on from 1.11 to 1.12 for as long as 1.12 is supported. For more information, see Upgrading the Istio add-on.
- Previous version
-
1.11.7
- Current version
-
1.11.8
- Updates in this version
-
See the Istio release notes for Istio 1.11.8.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2022-004.
Change log for 1.11.7, released 8 March 2022
Review the changes that are included in version 1.11.7 of the managed Istio add-on.
- Previous version
-
1.11.6
- Current version
-
1.11.7
- Updates in this version
-
See the Istio release notes for Istio 1.11.7.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2022-003.
Change log for 1.11.6, released 15 February 2022
Review the changes that are included in version 1.11.6 of the managed Istio add-on.
- Previous version
- 1.11.5
- Current version
- 1.11.6
- Updates in this version
- See the Istio release notes for Istio 1.11.6.
Change log for 1.11.5, released 14 December 2021
Review the changes that are in version 1.11.5 of the managed Istio add-on.
- Previous version
-
1.11.4
- Current version
-
1.11.5
- Updates in this version
-
See the Istio release notes for Istio 1.11.5.
-
Resolves the following CVE:
Change log for 1.11.4, released 2 November 2021
Review the changes that are in version 1.11.4 of the managed Istio add-on.
- Previous version
- 1.11.3
- Current version
- 1.11.4
- Updates in this version
- See the Istio release notes for Istio 1.11.4.
Change log for 1.11.3, released 7 October 2021
Review the changes that are in version 1.11.3 of the managed Istio add-on.
- Previous version
-
1.11.2
- Current version
-
1.11.3
- Updates in this version
-
See the Istio release notes for Istio 1.11.3.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2021-008.
Change log for 1.11.2, released 23 September 2021
Review the changes that are in version 1.11.2 of the managed Istio add-on.
- Previous version
-
1.11.1
- Current version
-
1.11.2
- Updates in this version
-
See the Istio release notes for Istio 1.11.2.
-
Resolves the following CVEs
Change log for 1.11.1, released 31 August 2021
Review the changes that are in version 1.11.1 of the managed Istio add-on.
- Previous version
-
1.10.3
- Current version
-
1.11.1
- Updates in this version
-
See the Istio release notes for Istio 1.11.0 and Istio 1.11.1.
-
Adds a
postStart
variable to the sidecar to enable the holdApplicationUntilProxyStarts option. Since the sidecar is normally last this doesn't impact default behavior where Istio places the sidecar as the last container. If you are adding containers to your pods, verify that they get added before the sidecar or can wait for the sidecar to start. -
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2021-008.
Version 1.10 (unsupported)
Review the changes that are in version 1.10 of the managed Istio add-on.
Version 1.10 of the managed Istio add-on is unsupported.
Change log for 1.10.6, released 13 January 2022
Review the changes that are included in version 1.10.6 of the managed Istio add-on.
- Previous version
- 1.10.5
- Current version
- 1.10.6
- Updates in this version
- See the Istio release notes for Istio 1.10.6.
Change log for 1.10.5, released 28 October 2021
Review the changes that are in version 1.10.5 of the managed Istio add-on.
- Previous version
-
1.10.4
- Current version
-
1.10.5
- Updates in this version
-
See the Istio release notes for Istio 1.10.5.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2021-008.
Change log for 1.10.4, released 14 September 2021
Review the changes that are in version 1.10.4 of the managed Istio add-on.
- Previous version
-
1.10.3
- Current version
-
1.10.4
- Updates in this version
-
See the Istio release notes for Istio 1.10.4.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2021-008.
Change log for 1.10.3, released 5 August 2021
Review the changes that are in version 1.10.3 of the managed Istio add-on.
- Previous version
- 1.10.2
- Current version
- 1.10.3
- Updates in this version
- See the Istio release notes for Istio 1.10.3.
Change log for 1.10.2, released 15 July 2021
Review the changes that are in version 1.10.2 of the managed Istio add-on.
- Previous version
-
1.9.5
- Current version
-
1.10.2
- Updates in this version
-
See the Istio release notes for:
-
The API version of the
IstioOperator
(IOP) custom resource definition is updated fromv1beta1
tov1
. Although this update does not impact existing custom IOP resources, you can optionally back up your IOP resources before upgrading to Istio version 1.10. -
The
IstioOperator
deployment is now created by the Istio add-on instead of the Operator Lifecycle Manager (OLM). If you choose to uninstall the add-on, steps are included to uninstall the deployment resources for the operator. -
In multizone clusters, the zone labels for default Istio ingress gateways are now sorted in reverse order to improve resiliency. This change does not affect any ingress gateways that are already enabled and assigned a zone label in the
managed-istio-custom
ConfigMap. -
Resolves the following CVEs
Version 1.9 (unsupported)
Version 1.9 of the managed Istio add-on is unsupported. (: deprecated)
Change log for 1.9.8, released 14 September 2021
Review the changes that are in version 1.9.8 of the managed Istio add-on.
- Previous version
-
1.9.7
- Current version
-
1.9.8
- Updates in this version
-
See the Istio release notes for Istio 1.9.8.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2021-008.
Change log for 1.9.7, released 12 August 2021
Review the changes that are in version 1.9.7 of the managed Istio add-on.
- Previous version
- 1.9.6
- Current version
- 1.9.7
- Updates in this version
- See the Istio release notes for Istio 1.9.7.
Change log for 1.9.6, released 22 July 2021
Review the changes that are in version 1.9.6 of the managed Istio add-on.
- Previous version
-
1.9.5
- Current version
-
1.9.6
- Updates in this version
-
See the Istio release notes for Istio 1.9.6.
-
Resolves the following CVEs
Change log for 1.9.5, released 27 May 2021
Review the changes that are in version 1.9.5 of the managed Istio add-on.
- Previous version
-
1.9.4
- Current version
-
1.9.5
- Updates in this version
-
See the Istio release notes for Istio 1.9.5.
-
Resolves CVE-2021-20305.
Change log for 1.9.4, released 17 May 2021
Review the changes that are in version 1.9.4 of the managed Istio add-on.
- Previous version
- 1.9.3
- Current version
- 1.9.4
- Updates in this version
- See the Istio release notes for Istio 1.9.4.
Change log for 1.9.3, released 29 April 2021
Review the changes that are in version 1.9.3 of the managed Istio add-on.
- Previous version
-
1.9.2
- Current version
-
1.9.3
- Updates in this version
-
See the Istio release notes for Istio 1.9.3.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2021-003.
Change log for 1.9.2, released 1 April 2021
Review the changes that are in version 1.9.2 of the managed Istio add-on.
- Previous version
-
1.8.4
- Current version
-
1.9.2
- Updates in this version
-
See the Istio release notes for:
-
The
istio-components-pilot-requests-cpu
setting is added to themanaged-istio-custom
ConfigMap resource to change the default CPU request of500
foristiod
.
Version 1.8 (unsupported)
Version 1.8 of the managed Istio add-on is unsupported. (: deprecated)
Change log for 1.8.6, released 27 May 2021
Review the changes that are in version 1.8.6 of the managed Istio add-on.
- Previous version
-
1.8.5
- Current version
-
1.8.6
- Updates in this version
-
See the Istio release notes for Istio 1.8.6.
-
ResolvesCVE-2021-20305.
Change log for 1.8.5, released 29 April 2021
Review the changes that are in version 1.8.5 of the managed Istio add-on.
- Previous version
-
1.8.4
- Current version
-
1.8.5
- Updates in this version
-
See the Istio release notes for Istio 1.8.5.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2021-003.
Change log for 1.8.4, released 23 March 2021
Review the changes that are in version 1.8.4 of the managed Istio add-on.
- Previous version
-
1.8.3
- Current version
-
1.8.4
- Updates in this version
-
See the Istio release notes for Istio 1.8.4.
-
Resolves the following CVEs
Change log for 1.8.3, released 1 March 2021
Review the changes that are in version 1.8.3 of the managed Istio add-on.
- Previous version
-
1.8.2
- Current version
-
1.8.3
- Updates in this version
-
See the Istio release notes for Istio 1.8.3.
-
Resolves the following CVEs
Change log for 1.8.2, released 25 January 2021
Review the changes that are in version 1.8.2 of the managed Istio add-on.
- Previous version
-
1.8.1
- Current version
-
1.8.2
- Updates in this version
-
See the Istio release notes for Istio 1.8.2.
-
Resolves the following CVEs
Change log for 1.8.1, released 16 December 2020
Review the changes that are in version 1.8.1 of the managed Istio add-on.
- Previous version
- 1.8.0
- Current version
- 1.8.1
- Updates in this version
- See the Istio release notes for Istio 1.8.1.
Change log for 1.8.0, released 9 December 2020
Review the changes that are in version 1.8.0 of the managed Istio add-on.
- Previous version
-
1.8.0
- Current version
-
1.7.5
- Updates in this version
-
See the Istio release notes for Istio 1.8.
-
If you created a custom
IstioOperator
(IOP) resource, remove therevision
field from the resource before you update your add-on to version 1.8 so that the custom gateways use version 1.8 ofistiod
. After you update your Istio add-on, update the tag for any custom gateways to 1.8. Allistio-monitoring
support is removed, and in themanaged-istio-custom
ConfigMap, theistio-monitoring-components
andistio-kiali-dashboard-viewOnlyMode
options are unsupported. To use monitoring with Istio, you must install the Kiali, Prometheus, Jaeger, and Grafana components separately from the Istio add-on. For more information, see the Istio documentation. -
The
istio-meshConfig-enableTracing
andistio-egressgateway-public-1-enabled
optional settings are added to themanaged-istio-custom
ConfigMap resource.
Version 1.7 (unsupported)
Version 1.7 of the managed Istio add-on is unsupported. (: deprecated)
Change log for 1.7.8, released 10 March 2021
Review the changes that are in version 1.7.8 of the managed Istio add-on.
- Previous version
-
1.7.7
- Current version
-
1.7.8
- Updates in this version
-
See the Istio release notes for Istio 1.7.8.
-
Resolves the following CVEs
Change log for 1.7.7, released 8 February 2021
Review the changes that are in version 1.7.7 of the managed Istio add-on.
- Previous version
-
1.7.6
- Current version
-
1.7.7
- Updates in this version
-
See the Istio release notes for Istio 1.7.7.
-
Resolves the following CVEs
Change log for 1.7.6, released 16 December 2020
Review the changes that are in version 1.7.6 of the managed Istio add-on.
- Previous version
-
1.7.5
- Current version
-
1.7.6
- Updates in this version
-
See the Istio release notes for Istio 1.7.6.
-
Resolves CVE-2020-28196.
Change log for 1.7.5, released 3 December 2020
Review the changes that are in version 1.7.5 of the managed Istio add-on.
- Previous version
- 1.7.4
- Current version
- 1.7.5
- Updates in this version
- See the Istio release notes for Istio 1.7.5.
Change log for 1.7.4, released 5 November 2020
Review the changes that are in version 1.7.4 of the managed Istio add-on.
- Previous version
-
1.7.3
- Current version
-
1.7.4
- Updates in this version
-
See the Istio release notes for Istio 1.7.4.
-
Resolves the following CVEs
Change log for 1.7.3, released 06 October 2020
Review the changes that are in version 1.7.3 of the managed Istio add-on.
- Previous version
-
1.7.2
- Current version
-
1.7.3
- Updates in this version
-
See the Istio release notes for Istio 1.7.3.
-
Updates Prometheus to version 2.21.0 and Jaeger to version 1.20.0. Note that these components are deprecated in version 1.7 of the Istio add-on and are automatically removed in version 1.8 of the Istio add-on.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2020-010.
Change log for 1.7.2, released 23 September 2020
Review the changes that are in version 1.7.2 of the managed Istio add-on.
- Previous version
- 1.7.1
- Current version
- 1.7.2
- Updates in this version
- See the Istio release notes for Istio 1.7.2.
Change log for 1.7.1, released 14 September 2020
Review the changes that are in version 1.7.1 of the managed Istio add-on.
- Previous version
- 1.7.0
- Current version
- 1.7.1
- Updates in this version
- See the Istio release notes for Istio 1.7.1.
Change log for 1.7.0, released 02 September 2020
Review the changes that are in version 1.7.0 of the managed Istio add-on.
- Previous version
-
1.6.8
- Current version
-
1.7.0
- Updates in this version
-
See the Istio release notes for Istio 1.7.
-
All
istio-monitoring
support is deprecated in version 1.7 of the Istio add-on and is automatically removed in version 1.8 of the Istio add-on. To use monitoring with Istio, you must install the components separately from the Istio add-on. -
For more information, see the Istio documentation.
-
The
istio-ingressgateway-public-(n)-enabled
andistio-ingressgateway-zone-(n)
options in themanaged-istio-custom
ConfigMap resource are generally available for production use.
Version 1.6 (unsupported)
Version 1.6 of the managed Istio add-on is unsupported. (: deprecated)
Differences between version 1.6 of managed and community Istio
Review the following differences between the installation profiles of version 1.6 of the managed IBM Cloud Kubernetes Service Istio and version 1.6 of the community Istio.
To see options for changing settings in the managed version of Istio, see Customizing the Istio installation.
Setting | Differences in the managed Istio add-on |
---|---|
meshConfig.enablePrometheusMerge=true and values.telemetry.v2.enabled=true |
In the managed Istio add-on, support for telemetry with IBM Cloud Monitoring is enabled by default. This support can be disabled by customizing the Istio installation. |
istio-ingressgateway and istio-egressgateway |
In the managed Istio add-on, placement of gateways on edge worker nodes is preferred, but not required. |
Envoy sidecar proxy lifecycle pre-stop | In the managed Istio add-on, a sleep time of 25 seconds is added to allow traffic connections to close before an Envoy sidecar is removed from an app pod. |
Change log for 1.6.14, released 3 December 2020
Review the changes that are in version 1.6.14 of the managed Istio add-on.
- Previous version
-
1.6.13
- Current version
-
1.6.14
- Updates in this version
-
See the Istio release notes for Istio 1.6.14.
-
Resolves CVE-2020-28196.
Change log for 1.6.13, released 5 November 2020
Review the changes that are in version 1.6.13 of the managed Istio add-on.
- Previous version
-
1.6.12
- Current version
-
1.6.13
- Updates in this version
-
See the Istio release notes for Istio 1.6.13.
-
Resolves the following CVEs
Change log for 1.6.12, released 22 October 2020
Review the changes that are in version 1.6.12 of the managed Istio add-on.
- Previous version
- 1.6.11
- Current version
- 1.6.12
- Updates in this version
- See the Istio release notes for Istio 1.6.12.
Change log for 1.6.11, released 06 October 2020
Review the changes that are in version 1.6.11 of the managed Istio add-on.
- Previous version
-
1.6.9
- Current version
-
1.6.11
- Updates in this version
-
See the Istio release notes for:
-
Updates Prometheus to version 2.21.0 and Jaeger to version 1.20.0. Note that these components are deprecated in version 1.7 of the Istio add-on and are automatically removed in version 1.8 of the Istio add-on.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2020-010.
Change log for 1.6.9, released 14 September 2020
Review the changes that are in version 1.6.9 of the managed Istio add-on.
- Previous version
-
1.6.8
- Current version
-
1.6.9
- Updates in this version
-
See the Istio release notes for Istio 1.6.9.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2020-009.
Change log for 1.6.8, released 12 August 2020
Review the changes that are in version 1.6.8 of the managed Istio add-on.
- Previous version
-
1.6.7
- Current version
-
1.6.8
- Updates in this version
-
See the Istio release notes for Istio 1.6.8.
-
Resolves CVE-2020-16844.
-
For more information, see the Istio security bulletin 2020-009
Change log for 1.6.7, released 04 August 2020
Review the changes that are in version 1.6.7 of the managed Istio add-on.
- Previous version
-
1.6.5
- Current version
-
1.6.7
- Updates in this version
-
See the Istio release notes for:
-
Resolves the following CVEs
Change log for 1.6.5, released 17 July 2020
Review the changes that are in version 1.6.5 of the managed Istio add-on.
- Previous version
-
1.6
- Current version
-
1.6.5
- Updates in this version
-
See the Istio release notes for Istio 1.6.5.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2020-008
Change log for 1.6, released 08 July 2020
Review the changes that are in version 1.6 of the managed Istio add-on.
- Previous version
-
1.5.7
- Current version
-
1.6
- Updates in this version
-
See the Istio release notes for Istio 1.6.
-
Support is added for the
istio-knative-cluster-local-gateway-enabled
andistio-monitoring-telemetry
options in themanaged-istio-custom
ConfigMap resource. You can use these options to manage inclusion of Knative apps in the service mesh and the Istio telemetry enablement. Support for IBM Cloud Monitoring is enabled for Istio by default.
Version 1.5 (unsupported)
Version 1.5 of the managed Istio add-on is unsupported. (: deprecated)
Differences between version 1.5 of managed and community Istio
Review the following differences between the installation profiles of version 1.5 of the managed IBM Cloud Kubernetes Service Istio and version 1.5 of the community Istio.
To see options for changing settings in the managed version of Istio, see Customizing the version 1.5 Istio installation.
Setting | Differences in the managed Istio add-on |
---|---|
egressGateways[name: istio-egressgateway].enabled: true |
In the managed Istio add-on, the egress gateway is enabled by default. |
istiod , istio-ingressgateway , and istio-egressgateway |
In the managed Istio add-on, istiod and all Istio ingress and egress gateways are set up for basic high availability support. High availability support on these components includes the following settings by default: node
anti-affinity, HorizontalPodAutoscaler , PodDisruptionBudget , and automatic scaling of replicas. |
prometheus.enabled: false |
In the managed Istio add-on, the Prometheus, Grafana, Jaeger, and Kiali monitoring components are disabled by default due to current security concerns in the community release of Istio that can't be adequately addressed for a production environment. |
values.global.pilot.enableProtocolSniffingForInbound and values.global.pilot.enableProtocolSniffingForOutbound |
In the managed Istio add-on, protocol sniffing is disabled by default until the feature becomes more stable in the community Istio. |
Change log for 1.5.10, released 1 September 2020
Review the changes that are in version 1.5.10 of the managed Istio add-on.
- Previous version
- 1.5.9
- Current version
- 1.5.10
- Updates in this version
- See the Istio release notes for Istio 1.5.10.
Change log for 1.5.9, released 12 August 2020
Review the changes that are in version 1.6.8 of the managed Istio add-on.
- Previous version
-
1.5.8
- Current version
-
1.5.9
- Updates in this version
-
See the Istio release notes for Istio 1.5.9.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2020-009.
Change log for 1.5.8, released 16 July 2020
Review the changes that are in version 1.5.8 of the managed Istio add-on.
- Previous version
-
1.5.7
- Current version
-
1.5.8
- Updates in this version
-
See the Istio release notes for Istio 1.5.8.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2020-008.
Change log for 1.5.7, released 8 July 2020
Review the changes that are in version 1.5.7 of the managed Istio add-on.
- Previous version
-
1.5.6
- Current version
-
1.5.7
- Updates in this version
-
See the Istio release notes for Istio 1.5.7.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2020-007.
Change log for 1.5.6, released 23 June 2020
Review the changes that are in version 1.5.6 of the managed Istio add-on.
- Previous version
-
1.5.4
- Current version
-
1.5.6
- Updates in this version
-
See the Istio release notes for Istio 1.5.5 and Istio 1.5.6.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin 2020-006
Change log for 1.5, released 19 May 2020
Review the changes that are in version 1.5 of the managed Istio add-on.
Version 1.5 of the Istio add-on is supported for clusters that run Kubernetes versions 1.17 only.
- Previous version
-
1.4.9
- Current version
-
1.5
- Updates in this version
-
See the Istio release notes for Istio 1.5.
-
The Citadel secret discovery service (SDS) is now enabled by default to provide identity provisioning and certification for workloads in the service mesh. With the
managed-istio-custom
ConfigMap resource, you can customize a set of Istio configuration options. These settings include extra control over monitoring, logging, and networking in your control plane and service mesh. Beta: By default, one public Istio load balancer,istio-ingressgateway
, is enabled in your cluster. To achieve higher availability, you can now enable an Istio load balancer in each zone of your cluster. For more information, see Enabling or disabling public Istio load balancers. The Prometheus, Grafana, Jaeger, and Kiali monitoring components are disabled by default due to current security concerns in the community release of Istio that can't be adequately addressed for a production environment. If you use IBM Cloud Monitoring to monitor your Istio-managed apps, update thesysdig-agent
ConfigMap so that sidecar metrics are tracked. Changes can't be made to the Kiali dashboard in view-only mode by default. You can change this setting by editing themanaged-istio-custom
ConfigMap. Your cluster must have a secret with credentials to Grafana to access the Grafana dashboard.
Version 1.4 (unsupported)
Version 1.4 of the managed Istio add-on is unsupported. (: deprecated)
Change log for 1.4.9, released 18 May 2020
Review the changes that are in version 1.4.9 of the managed Istio add-on.
- Previous version
-
1.4.8
- Current version
-
1.4.9
- Updates in this version
-
See the Istio release notes for Istio 1.4.9.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin
Change log for 1.4.8, released 30 April 2020
Review the changes that are in version 1.4.8 of the managed Istio add-on.
- Previous version
-
1.4.7
- Current version
-
1.4.8
- Updates in this version
-
See the Istio release notes for Istio 1.4.8.
-
Resolves the following CVEs
Change log for 1.4.7, released 01 April 2020
Review the changes that are in version 1.4.7 of the managed Istio add-on.
- Previous version
-
1.4.6
- Current version
-
1.4.7
- Updates in this version
-
See the Istio release notes for Istio 1.4.7.
-
Resolves the following CVEs
Change log for 1.4.6, released 09 March 2020
Review the changes that are in version 1.4.6 of the managed Istio add-on.
- Previous version
-
1.4.5
- Current version
-
1.4.6
- Updates in this version
-
See the Istio release notes for Istio 1.4.6.
-
Resolves the following CVEs
Change log for 1.4.5, released 21 February 2020
Review the changes that are in version 1.4.5 of the managed Istio add-on.
- Previous version
-
1.4.4
- Current version
-
1.4.5
- Updates in this version
-
See the Istio release notes for Istio 1.4.5.
-
Resolves the following CVEs
Change log for 1.4.4, released 14 February 2020
Review the changes that are in version 1.4.4 of the managed Istio add-on.
- Previous version
-
1.4.3
- Current version
-
1.4.4
- Updates in this version
-
See the Istio release notes for Istio 1.4.4.
-
Disables protocol sniffing and detection.
-
Improves the termination sequence for rolling updates of ingress and egress gateways.
-
Resolves the following CVEs
- CVE-2020-8595
- CVE-2019-13627
- CVE-2019-15166
- CVE-2019-1010220
- CVE-2019-19906
- CVE-2019-15167
- CVE-2019-20386
- CVE-2019-13627
- CVE-2019-13734
- CVE-2019-3843
- CVE-2019-3844
- CVE-2019-11729
- CVE-2019-11745
- CVE-2019-1543
- CVE-2019-1547
- CVE-2019-1549
- CVE-2019-1563
- CVE-2019-5094
- CVE-2018-14882
- CVE-2018-19519
- CVE-2018-14467
- CVE-2018-16451
- CVE-2018-14464
- CVE-2018-14463
- CVE-2018-14468
- CVE-2018-14879
- CVE-2018-14462
- CVE-2018-14881
- CVE-2018-14470
- CVE-2018-14469
- CVE-2018-16227
- CVE-2018-16452
- CVE-2018-14466
- CVE-2018-14880
- CVE-2018-10105
- CVE-2018-16229
- CVE-2018-16230
- CVE-2018-10103
- CVE-2018-14461
- CVE-2018-16300
- CVE-2018-16228
- CVE-2018-14465
- CVE-2017-16808
-
For more information, see the Istio security bulletin 2020-001
Change log for 1.4.3, released 16 January 2020
Review the changes that are in version 1.4.3 of the managed Istio add-on.
- Previous version
-
1.4.2
- Current version
-
1.4.3
- Updates in this version
-
See the Istio release notes for Istio 1.4.3.
-
Disables protocol sniffing and detection.
-
Improves the termination sequence for rolling updates of ingress and egress gateways.
Change log for 1.4.2, released 16 December 2020
Review the changes that are in version 1.4.2 of the managed Istio add-on.
- Previous version
-
1.4.0
- Current version
-
1.4.2
- Updates in this version
-
See the Istio release notes for Istio 1.4.2.
-
Resolves the following CVEs
-
For more information, see the Istio security bulletin.