IBM Cloud Docs
Istio add-on change log

Istio add-on change log

View information for patch and minor version updates to the managed Istio add-on in your IBM Cloud® Kubernetes Service Kubernetes clusters.

  • Patch updates: IBM Cloud keeps all your Istio components up-to-date by automatically rolling out patch updates to the most recent version of Istio that is supported by IBM Cloud Kubernetes Service. You can check the patch version of your add-on by running kubectl get iop managed-istio -n ibm-operators -o jsonpath='{.metadata.annotations.version}'.
  • Minor version updates: To update your Istio components to the most recent minor version of Istio that is supported by IBM Cloud Kubernetes Service, such as from version 1.8 to 1.9, follow the steps in Updating the minor version of the Istio add-on. When a minor version (n) of the Istio add-on is released, 1 minor version behind (n-1) is supported for typically 6 weeks after the latest version release date.
  • istioctl and sidecar updates: Whenever the managed Istio add-on is updated, make sure that you update your istioctl client and the Istio sidecars for your app to match the Istio version of the add-on. You can check whether the versions of your istioctl client and the Istio add-on control plane match by running istioctl version.

To view a list of add-ons and the supported cluster versions, run the following command or see the Supported cluster add-on versions.

ibmcloud ks cluster addon versions

Version 1.20

Change log for 1.20.4, released 03 April 2024

Review the changes that are included in version 1.20.4 of the managed Istio add-on.

Previous version
1.20.3
Current version
1.20.4
Updates in this version
Uninstalling Addon-Istio no longer deletes the istio-system namespace. This cleanup became unnecessary over time.
See the Istio release notes for Istio 1.20.4.
Resolves the following CVEs:

Change log for 1.20.3, released 06 March 2024

Review the changes that are included in version 1.20.3 of the managed Istio add-on.

Previous version
1.20.2
Current version
1.20.3
Updates in this version
See the Istio release notes for Istio 1.20.3.
Resolves the following CVEs:

Change log for 1.20.2, released 07 February 2024

Review the changes that are included in version 1.20.2 of the managed Istio add-on.

Previous version
1.20.1
Current version
1.20.2
Updates in this version
For more information, see the Istio 1.20.2 release notes.
Resolves the following CVEs:

Change log for 1.20.1, released 10 January 2024

Review the changes that are included in version 1.20.1 of the managed Istio add-on.

Previous version
1.20.0
Current version
1.20.1
Updates in this version
For more information, see the Istio security bulletin 2023-005.
See the Istio release notes for Istio 1.20.1.
Resolves the following CVEs:

Change log for 1.20.0, released 7 December 2023

Review the changes that are included in version 1.20.0 of the managed Istio add-on.

Previous version
1.19.4
Current version
1.20.0
Updates in this version
See the Istio release notes for Istio 1.20.0.

Version 1.19

Change log for 1.19.8, released 03 April 2024

Review the changes that are included in version 1.19.8 of the managed Istio add-on.

Previous version
1.19.7
Current version
1.19.8
Updates in this version
This version is the final version of Addon-Istio 1.19. Addon-Istio 1.19 is unsupported on 8 May 2024.
Uninstalling Addon-Istio no longer deletes the istio-system namespace. This cleanup became unnecessary over time.
See the Istio release notes for Istio 1.19.8.
Resolves the following CVEs:

Change log for 1.19.7, released 06 March 2024

Review the changes that are included in version 1.19.7 of the managed Istio add-on.

Previous version
1.19.6
Current version
1.19.7
Updates in this version
See the Istio release notes for Istio 1.19.7.
Resolves the following CVEs:

Change log for 1.19.6, released 07 February 2024

Review the changes that are included in version 1.19.6 of the managed Istio add-on.

Previous version
1.19.5
Current version
1.19.6
Updates in this version
See the Istio 1.19.6 release notes.
Resolves the following CVEs:

Change log for 1.19.5, released 10 January 2024

Review the changes that are included in version 1.19.5 of the managed Istio add-on.

Previous version
1.19.4
Current version
1.19.5
Updates in this version
For more information, see the Istio security bulletin 2023-005.
See the Istio release notes for Istio 1.19.5.
Resolves the following CVEs:

Change log for 1.19.4, released 5 December 2023

Review the changes that are included in version 1.19.4 of the managed Istio add-on.

Previous version
1.19.3
Current version
1.19.4
Updates in this version
See the Istio release notes for Istio 1.19.64.
Resolves the following CVEs:

Change log for 1.19.3, released 10 October 2023

Review the changes that are included in version 1.19.3 of the managed Istio add-on.

Previous version
1.18.3
Current version
1.19.3
Updates in this version
For more information, see the Istio security bulletin 2023-004
See the Istio release notes for Istio 1.19.3.
Upstream announcement for Istio 1.19.0.
Addon-Istio does not support ambient mesh at this time

Unsupported: Version 1.18

Change log for 1.18.7, released 07 February 2024

Review the changes that are included in version 1.18.7 of the managed Istio add-on.

Previous version
1.18.6
Current version
1.18.7
Updates in this version
This version is the EOL version for 1.18. Support for Istio 1.18 ends on 21 February 2024.
See the Istio release notes for Istio 1.18.7.
Resolves the following CVEs:

Change log for 1.18.6, released 10 January 2024

Review the changes that are included in version 1.18.6 of the managed Istio add-on.

Previous version
1.18.5
Current version
1.18.6
Updates in this version
See the Istio release notes for Istio 1.18.6.
For more information, see the Istio security bulletin 2023-005.
Resolves the following CVEs:

Change log for 1.18.5, released 18 October 2023

Previous version
1.18.3
Current version
1.18.5
Updates in this version
See the Istio release notes for Istio 1.18.5.
Resolves CVE-2023-44487 and CVE-2023-39325.
For more information, see the Istio security bulletin 2023-004.

Change log for 1.18.3, released 3 October 2023

Review the changes that are included in version 1.18.3 of the managed Istio add-on.

Previous version
1.18.2
Current version
1.18.3
Updates in this version
See the Istio release notes for Istio 1.18.3.
Resolves the following CVEs:

Change log for 1.18.2, released 8 August 2023

Review the changes that are included in version 1.18.2 of the managed Istio add-on.

Previous version
1.18.1
Current version
1.18.2
Updates in this version
See the Istio release notes for Istio 1.18.2.
For more information, see the Istio security bulletin 2023-003.

Change log for 1.18.1, released 27 July 2023

Review the changes that are included in version 1.18.1 of the managed Istio add-on. For more information, see the Istio security bulletin 2023-002.

Previous version
1.18.0
Current version
1.18.1
Updates in this version
See the Istio release notes for Istio 1.18.1.
Resolves the following CVEs:

Change log for 1.18.0, released 12 July 2023

Review the changes that are included in version 1.18.0 of the managed Istio add-on.

Previous version
1.17.3
Current version
1.18.0
Updates in this version
See the Istio release notes for Istio 1.18.0.
Adds an enable-targeted-envoy-access-log Envoy extension provider to the mesh config. You can use Telemetry CRs to enable Envoy access logs on specific workloads rather than enabling it for the entire mesh. For more information, see Observing Istio traffic.
Protocol sniffing is now enabled for Addon-Istio.
Addon-Istio pods now have a nodeAffinity for amd64 architecture nodes.
Adjusts how meshConfig sets enableAutoMtls, enableTracing, and protocolDetectionTimeout to their current values. This results in a no operation change because the values are not changing. The only change is whether they are set implicitly or explicitly.
Sets the security context explicitly in the Istio Operator CR. This results in a no operation change because the values are not changing. The only change is whether they are set implicitly or explicitly.
Resolves the following CVEs:

Unsupported: Version 1.17

Version 1.17 of the managed Istio add-on is unsupported.

Change log for 1.17.8, released 18 October 2023

Previous version
1.17.6
Current version
1.17.8
Updates in this version
See the Istio release notes for Istio 1.17.8.
Resolves CVE-2023-44487 and CVE-2023-39325.
For more information, see the Istio security bulletin 2023-004

Change log for 1.17.6, released 3 October 2023

Review the changes that are included in version 1.17.6 of the managed Istio add-on.

Previous version
1.17.6
Current version
1.17.5
Updates in this version
See the Istio release notes for Istio 1.17.6.
Resolves the following CVEs:

Change log for 1.17.5, released 8 August 2023

Review the changes that are included in version 1.17.5 of the managed Istio add-on.

Previous version
1.17.4
Current version
1.17.5
Updates in this version
See the Istio release notes for Istio 1.17.5.
For more information, see the Istio security bulletin 2023-003.

Change log for 1.17.4, released 27 July 2023

Review the changes that are included in version 1.17.4 of the managed Istio add-on. For more information, see the Istio security bulletin 2023-002.

Previous version
1.17.3
Current version
1.17.4
Updates in this version
See the Istio release notes for Istio 1.17.4.
Resolves the following CVEs:

Change log for 1.17.3, released 22 June 2023

Review the changes that are included in version 1.17.3 of the managed Istio add-on.

Previous version
1.17.2
Current version
1.17.3
Updates in this version
See the Istio release notes for Istio 1.17.3.
Resolves the following CVEs:

Change log for 1.17.2, released 20 April 2023

Review the changes that are included in version 1.17.2 of the managed Istio add-on.

Previous version
1.17.1
Current version
1.17.2
Updates in this version
See the Istio release notes for Istio 1.17.2 and the Istio security bulletin 2023-001
Resolves the following CVEs:

Change log for 1.17.1, released 7 March 2023

Review the changes that are included in version 1.17.1 of the managed Istio add-on.

Previous version
1.16.2
Current version
1.17.1
Updates in this version
See the Istio release notes for Istio 1.17.1.
Resolves the following CVEs:

Unsupported: Version 1.16

Version 1.16 of the managed Istio add-on is unsupported.

Change log for 1.16.7, released 8 August 2023

Review the changes that are included in version 1.16.7 of the managed Istio add-on.

Previous version
1.16.6
Current version
1.16.7
Updates in this version
See the Istio release notes for Istio 1.16.7.
For more information, see the Istio security bulletin 2023-003.

Change log for 1.16.6, released 27 July 2023

Review the changes that are included in version 1.16.6 of the managed Istio add-on. For more information, see the Istio security bulletin 2023-002.

Previous version
1.16.5
Current version
1.16.6
Updates in this version
See the Istio release notes for Istio 1.16.6.
Resolves the following CVEs:

Change log for 1.16.5, released 8 June 2022

Review the changes that are included in version 1.16.5 of the managed Istio add-on.

Previous version
1.16.4
Current version
1.16.5
Updates in this version
See the Istio release notes for Istio 1.16.5.
Resolves the following CVEs:

Change log for 1.16.4, released 20 April 2023

Review the changes that are included in version 1.16.4 of the managed Istio add-on.

Previous version
1.16.3
Current version
1.16.4
Updates in this version
See the Istio release notes for Istio 1.16.4 and the Istio security bulletin 2023-001.
Resolves the following CVEs:

Change log for 1.16.3, released 9 March 2023

Review the changes that are included in version 1.16.3 of the managed Istio add-on.

Previous version
1.16.2
Current version
1.16.3
Updates in this version
See the Istio release notes for Istio 1.16.3.
Resolves the following CVEs:

Change log for 1.16.2, released 14 February 2023

Review the changes that are included in version 1.16.2 of the managed Istio add-on.

Previous version
1.16.1
Current version
1.16.2
Updates in this version
See the Istio release notes for Istio 1.16.2.
Resolves the following CVEs:

Change log for 1.16.1, released 10 January 2023

Previous version
1.16.0
Current version
1.16.1
Updates in this version
See the Istio release notes for Istio 1.16.1.
Fixes a podAntiAffinity label bug where the value was incorrect.
Adds support for Gateway API resource.
Resolves the following CVEs:

Change log for 1.16.0, released November 30th, 2022

Review the changes that are included in version 1.16.0 of the managed Istio add-on.

Previous version
1.15.3
Current version
1.16.0
Updates in this version
See the Istio release notes for Istio 1.16.0.
The Gateway API resource is now supported.
Resolves the following CVEs:

Unsupported: Version 1.15

Version 1.15 of the managed Istio add-on is unsupported.

Change log for 1.15.6, released 9 March 2023

Review the changes that are included in version 1.15.6 of the managed Istio add-on.

Previous version
1.15.5
Current version
1.15.6
Updates in this version
See the Istio release notes for Istio 1.15.6.
Resolves the following CVEs:

Change log for 1.15.5, released 14 February 2023

Review the changes that are included in version 1.15.5 of the managed Istio add-on.

Previous version
1.15.4
Current version
1.15.5
Updates in this version
See the Istio release notes for Istio 1.15.5.
Resolves the following CVEs:

Change log for 1.15.4, released 10 January 2023

Previous version
1.15.3
Current version
1.15.4
Updates in this version
See the Istio release notes for Istio 1.15.4.
Fixes a podAntiAffinity label bug where the value was incorrect.
Resolves the following CVEs:

Change log for 1.15.3, released 10 November 2022

Review the changes that are included in version 1.15.3 of the managed Istio add-on.

Previous version
1.15.2
Current version
1.15.3
Updates in this version
See the Istio release notes for Istio 1.15.3.

Change log for 1.15.2, released 25 October 2022

Review the changes that are included in version 1.15.2 of the managed Istio add-on.

Previous version
1.15.1
Current version
1.15.2
Updates in this version
See the Istio release notes for Istio 1.15.2.
Resolves the following CVEs:

Change log for 1.15.1, released 11 October 2022

Review the changes that are included in version 1.15.1 of the managed Istio add-on.

Previous version
1.15.0
Current version
1.15.1
Updates in this version
See the Istio release notes for Istio 1.15.1.
Fixes the Istio operator memory leak issue.
Resolves the following CVEs:

Change log for 1.15.0, released 15 September 2022

Review the changes that are included in version 1.15.0 of the managed Istio add-on.

Previous version
1.14.3
Current version
1.15.0
Updates in this version
See the Istio release notes for Istio 1.15.0.
Adds a 1 G memory limit and a 100 M memory request to the add-on-istio-operator deployment. This addition resolves an error in which a reconcile loop increased memory usage over time. Because of this change, your Istio operator pod might restart frequently. However, the frequent operator pod restarts do not affect Istio on the cluster and your Kubernetes deployment still matches what was specified in the IOPs.
Resolves the following CVEs:

Unsupported: Version 1.14

Version 1.14 of the managed Istio add-on is unsupported.

Change log for 1.14.6, released 10 January 2023

Review the changes that are included in version 1.14.6 of the managed Istio add-on.

Previous version
1.14.5
Current version
1.14.6
Updates in this version
See the Istio release notes for Istio 1.14.6.
Fixes a podAntiAffinity label bug where the value was incorrect.
Resolves the following CVEs:

Change log for 1.14.5, released 25 October 2022

Review the changes that are included in version 1.14.5 of the managed Istio add-on.

Previous version
1.14.4
Current version
1.14.5
Updates in this version
See the Istio release notes for Istio 1.14.5.
The istio operator memory leak is fixed in 1.14.5.
Resolves the following CVEs:

Change log for 1.14.4, released 4 October 2022

Review the changes that are included in version 1.14.4 of the managed Istio add-on.

Previous version
1.14.3
Current version
1.14.4
Updates in this version
See the Istio release notes for Istio 1.14.4.
Adds a 1G memory limit and a 100M memory request to the add-on-istio-operator deployment. This addition resolves an error in which a reconcile loop increased memory usage over time. Because of this change, your Istio operator pod might restart frequently. However, the frequent operator pod restarts do not affect Istio on the cluster and your Kubernetes deployment still matches what was specified in the IOPs.
Resolves the following CVEs:

Change log for 1.14.3, released 16 August 2022

Review the changes that are included in version 1.14.3 of the managed Istio add-on.

Previous version
1.14.1
Current version
1.14.3
Updates in this version
See the Istio release notes for Istio 1.14.3.
Resolves the following CVEs:

Change log for 1.14.1, released 16 June 2022

Review the changes that are included in version 1.14.1 of the managed Istio add-on.

Previous version
1.13.4
Current version
1.14.1
Updates in this version
See the Istio release notes for Istio 1.14.1.

Unsupported: Version 1.13

Version 1.13 of the managed Istio add-on is unsupported.

Change log for 1.13.9, released 25 October 2022

Review the changes that are included in version 1.13.9 of the managed Istio add-on.

This is the final update for version 1.13, which becomes unsupported on 17 Nov 2022. You can update the minor version of the add-on from 1.12 to 1.13 for as long as 1.13 is supported. You can update the minor version of the add-on from 1.13 to 1.14 for as long as 1.14 is supported. For more information, see Upgrading the Istio add-on.

Previous version
1.13.8
Current version
1.13.9
Updates in this version
See the Istio release notes for Istio 1.13.9.
Resolves the following CVEs:

Change log for 1.13.8, released 4 October 2022

Review the changes that are included in version 1.13.8 of the managed Istio add-on.

Previous version
1.13.7
Current version
1.13.8
Updates in this version
See the Istio release notes for Istio 1.13.8.
Resolves the following CVEs:

Change log for 1.13.7, released 16 August 2022

Review the changes that are included in version 1.13.7 of the managed Istio add-on.

Previous version
1.13.5
Current version
1.13.7
Updates in this version
See the Istio release notes for Istio 1.13.7.
Resolves the following CVEs:

Change log for 1.13.5, released 21 June 2022

Review the changes that are included in version 1.13.5 of the managed Istio add-on.

Previous version

1.13.4

Current version

1.13.5

Updates in this version

See the Istio release notes for Istio 1.13.5.

Resolves the following CVEs:

For more information, see the Istio security bulletin 2022-005/

Change log for 1.13.4, released 1 June 2022

Review the changes that are included in version 1.13.4 of the managed Istio add-on.

Previous version
1.13.3
Current version
1.13.4
Updates in this version
See the Istio release notes for Istio 1.13.4.
Resolves the following CVEs:

Change log for 1.13.3, released 3 May 2021

Review the changes that are included in version 1.13.3 of the managed Istio add-on.

Previous version

1.13.2

Current version

1.13.3

Updates in this version

See the Istio release notes for Istio 1.13.3.

Resolves the following CVEs:

Change log for 1.13.2, released 22 March 2022

Review the changes that are included in version 1.13.2 of the managed Istio add-on.

Previous version

1.13.1

Current version

1.13.2

Updates in this version

See the Istio release notes for Istio 1.13.2.

Resolves the following CVEs

For more information, see the Istio security bulletin 2022-004.

Change log for 1.13.1, released March 9th, 2021

Review the changes that are included in version 1.13.1 of the managed Istio add-on.

Previous version
1.12.4
Current version
1.13.1
Updates in this version
See the Istio release notes for Istio 1.13.1.

Version 1.12 (unsupported)

Version 1.12 of the managed Istio add-on is unsupported.

If you want to upgrade from Istio minor version 1.11 to version 1.12 and your Istio components were provisioned at version 1.10 or earlier, you must take steps to set up your mutating and validating webhooks before you upgrade. If you do not make these changes before upgrading to 1.12, the upgrade will stall.

Change log for 1.12.9, released 26 July 2022

Review the changes that are included in version 1.12.9 of the managed Istio add-on.

Previous version
1.12.8
Current version
1.12.9
Updates in this version
See the Istio release notes for Istio 1.12.9.
Resolves the following CVEs:

Change log for 1.12.8, released 21 June 2022

Review the changes that are included in version 1.12.8 of the managed Istio add-on.

Previous version

1.12.7

Current version

1.12.8

Updates in this version

See the Istio release notes for Istio 1.12.8.

Resolves the following CVEs:

For more information, see the Istio security bulletin 2022-005/

Change log for 1.12.7, released 19 May 2022

Review the changes that are included in version 1.12.7 of the managed Istio add-on.

Previous version

1.12.6

Current version

1.12.7

Updates in this version

See the Istio release notes for Istio 1.12.7.

Resolves the following CVEs:

For more information, see the Istio security bulletin 2021-008

Change log for 1.12.6, released 19 April 2022

Review the changes that are included in version 1.12.6 of the managed Istio add-on.

Previous version

1.12.5

Current version

1.12.6

Updates in this version

See the Istio release notes for Istio 1.12.6.

Resolves the following CVEs

Change log for 1.12.5, released 22 March 2022

Review the changes that are included in version 1.12.5 of the managed Istio add-on.

Previous version

1.12.4

Current version

1.12.5

Updates in this version

See the Istio release notes for Istio 1.12.5.

Resolves the following CVEs

For more information, see the Istio security bulletin 2022-004.

Change log for 1.12.4, released 8 March 2022

Review the changes that are included in version 1.12.4 of the managed Istio add-on.

Previous version

1.12.3

Current version

1.12.4

Updates in this version

See the Istio release notes for Istio 1.12.4.

Resolves the following CVEs

For more information, see the Istio security bulletin 2022-003.

Change log for 1.12.3, released 22 February 2021

Review the changes that are included in version 1.12.3 of the managed Istio add-on.

Previous version
1.12.2
Current version
1.12.3
Updates in this version
See the Istio release notes for Istio 1.12.3.

Change log for 1.12.2, released 03 February 2022

Review the changes that are included in version 1.12.2 of the managed Istio add-on.

Previous version

1.12.1

Current version

1.12.2

Updates in this version

See the Istio release notes for Istio 1.12.2.

For more information, see the Istio security bulletin 2022-001 and Istio security bulletin 2022-002.

Change log for 1.12.1, released 13 January 2022

Review the changes that are included in version 1.12.1 of the managed Istio add-on.

Previous version
1.12.0
Current version
1.12.1
Updates in this version
See the Istio release notes for Istio 1.12.1.

Change log for 1.12.0, released 08 December 2021

Previous version

1.11.4

Current version

1.12.0

Updates in this version

See the Istio release notes for Istio 1.12.0.

Updates the managed-istio operator settings. This includes a TERMINATION_DRAIN_DURATION of 30 seconds which replaces an earlier preStop variable of 25 seconds. If you are already using a TERMINATION_DRAIN_DURATION you must increase the value by 30 seconds to account for this change.

Updates the affinity rules in the k8s.overlay to k8s.affinity. If you are using custom gateways, review the updated configuration for the default gateways to see if you want to use the change in your custom gateways.

Users can now increase the max horizontal pod autoscaler (HPA) pods for istiod. Do not change this value to less than the default of 5. You can increase this value, but only in situations where you have a large service mesh.

Resolves the following CVEs

Version 1.11 (unsupported)

Review the changes that are in version 1.11 of the managed Istio add-on.

Version 1.11 of the managed Istio add-on is unsupported.

Change log for 1.11.8, released 22 March 2022

Review the changes that are included in version 1.11.8 of the managed Istio add-on.

This is the final update for version 1.11, which becomes unsupported on 21 April 2022. You can update the minor version of the add-on from 1.10 to 1.11 for as long as 1.11 is supported. You can update the minor version of the add-on from 1.11 to 1.12 for as long as 1.12 is supported. For more information, see Upgrading the Istio add-on.

Previous version

1.11.7

Current version

1.11.8

Updates in this version

See the Istio release notes for Istio 1.11.8.

Resolves the following CVEs

For more information, see the Istio security bulletin 2022-004.

Change log for 1.11.7, released 8 March 2022

Review the changes that are included in version 1.11.7 of the managed Istio add-on.

Previous version

1.11.6

Current version

1.11.7

Updates in this version

See the Istio release notes for Istio 1.11.7.

Resolves the following CVEs

For more information, see the Istio security bulletin 2022-003.

Change log for 1.11.6, released 15 February 2022

Review the changes that are included in version 1.11.6 of the managed Istio add-on.

Previous version
1.11.5
Current version
1.11.6
Updates in this version
See the Istio release notes for Istio 1.11.6.

Change log for 1.11.5, released 14 December 2021

Review the changes that are in version 1.11.5 of the managed Istio add-on.

Previous version

1.11.4

Current version

1.11.5

Updates in this version

See the Istio release notes for Istio 1.11.5.

Resolves the following CVE:

Change log for 1.11.4, released 2 November 2021

Review the changes that are in version 1.11.4 of the managed Istio add-on.

Previous version
1.11.3
Current version
1.11.4
Updates in this version
See the Istio release notes for Istio 1.11.4.

Change log for 1.11.3, released 7 October 2021

Review the changes that are in version 1.11.3 of the managed Istio add-on.

Previous version

1.11.2

Current version

1.11.3

Updates in this version

See the Istio release notes for Istio 1.11.3.

Resolves the following CVEs

For more information, see the Istio security bulletin 2021-008.

Change log for 1.11.2, released 23 September 2021

Review the changes that are in version 1.11.2 of the managed Istio add-on.

Previous version

1.11.1

Current version

1.11.2

Updates in this version

See the Istio release notes for Istio 1.11.2.

Resolves the following CVEs

Change log for 1.11.1, released 31 August 2021

Review the changes that are in version 1.11.1 of the managed Istio add-on.

Previous version

1.10.3

Current version

1.11.1

Updates in this version

See the Istio release notes for Istio 1.11.0 and Istio 1.11.1.

Adds a postStart variable to the sidecar to enable the holdApplicationUntilProxyStarts option. Since the sidecar is normally last this doesn't impact default behavior where Istio places the sidecar as the last container. If you are adding containers to your pods, verify that they get added before the sidecar or can wait for the sidecar to start.

Resolves the following CVEs

For more information, see the Istio security bulletin 2021-008.

Version 1.10 (unsupported)

Review the changes that are in version 1.10 of the managed Istio add-on.

Version 1.10 of the managed Istio add-on is unsupported.

Change log for 1.10.6, released 13 January 2022

Review the changes that are included in version 1.10.6 of the managed Istio add-on.

Previous version
1.10.5
Current version
1.10.6
Updates in this version
See the Istio release notes for Istio 1.10.6.

Change log for 1.10.5, released 28 October 2021

Review the changes that are in version 1.10.5 of the managed Istio add-on.

Previous version

1.10.4

Current version

1.10.5

Updates in this version

See the Istio release notes for Istio 1.10.5.

Resolves the following CVEs

For more information, see the Istio security bulletin 2021-008.

Change log for 1.10.4, released 14 September 2021

Review the changes that are in version 1.10.4 of the managed Istio add-on.

Previous version

1.10.3

Current version

1.10.4

Updates in this version

See the Istio release notes for Istio 1.10.4.

Resolves the following CVEs

For more information, see the Istio security bulletin 2021-008.

Change log for 1.10.3, released 5 August 2021

Review the changes that are in version 1.10.3 of the managed Istio add-on.

Previous version
1.10.2
Current version
1.10.3
Updates in this version
See the Istio release notes for Istio 1.10.3.

Change log for 1.10.2, released 15 July 2021

Review the changes that are in version 1.10.2 of the managed Istio add-on.

Previous version

1.9.5

Current version

1.10.2

Updates in this version

See the Istio release notes for:

The API version of the IstioOperator (IOP) custom resource definition is updated from v1beta1 to v1. Although this update does not impact existing custom IOP resources, you can optionally back up your IOP resources before upgrading to Istio version 1.10.

The IstioOperator deployment is now created by the Istio add-on instead of the Operator Lifecycle Manager (OLM). If you choose to uninstall the add-on, steps are included to uninstall the deployment resources for the operator.

In multizone clusters, the zone labels for default Istio ingress gateways are now sorted in reverse order to improve resiliency. This change does not affect any ingress gateways that are already enabled and assigned a zone label in the managed-istio-custom ConfigMap.

Resolves the following CVEs

Version 1.9 (unsupported)

Version 1.9 of the managed Istio add-on is unsupported. (: deprecated)

Change log for 1.9.8, released 14 September 2021

Review the changes that are in version 1.9.8 of the managed Istio add-on.

Previous version

1.9.7

Current version

1.9.8

Updates in this version

See the Istio release notes for Istio 1.9.8.

Resolves the following CVEs

For more information, see the Istio security bulletin 2021-008.

Change log for 1.9.7, released 12 August 2021

Review the changes that are in version 1.9.7 of the managed Istio add-on.

Previous version
1.9.6
Current version
1.9.7
Updates in this version
See the Istio release notes for Istio 1.9.7.

Change log for 1.9.6, released 22 July 2021

Review the changes that are in version 1.9.6 of the managed Istio add-on.

Previous version

1.9.5

Current version

1.9.6

Updates in this version

See the Istio release notes for Istio 1.9.6.

Resolves the following CVEs

Change log for 1.9.5, released 27 May 2021

Review the changes that are in version 1.9.5 of the managed Istio add-on.

Previous version

1.9.4

Current version

1.9.5

Updates in this version

See the Istio release notes for Istio 1.9.5.

Resolves CVE-2021-20305.

Change log for 1.9.4, released 17 May 2021

Review the changes that are in version 1.9.4 of the managed Istio add-on.

Previous version
1.9.3
Current version
1.9.4
Updates in this version
See the Istio release notes for Istio 1.9.4.

Change log for 1.9.3, released 29 April 2021

Review the changes that are in version 1.9.3 of the managed Istio add-on.

Previous version

1.9.2

Current version

1.9.3

Updates in this version

See the Istio release notes for Istio 1.9.3.

Resolves the following CVEs

For more information, see the Istio security bulletin 2021-003.

Change log for 1.9.2, released 1 April 2021

Review the changes that are in version 1.9.2 of the managed Istio add-on.

Previous version

1.8.4

Current version

1.9.2

Updates in this version

See the Istio release notes for:

The istio-components-pilot-requests-cpu setting is added to the managed-istio-custom ConfigMap resource to change the default CPU request of 500 for istiod.

Version 1.8 (unsupported)

Version 1.8 of the managed Istio add-on is unsupported. (: deprecated)

Change log for 1.8.6, released 27 May 2021

Review the changes that are in version 1.8.6 of the managed Istio add-on.

Previous version

1.8.5

Current version

1.8.6

Updates in this version

See the Istio release notes for Istio 1.8.6.

ResolvesCVE-2021-20305.

Change log for 1.8.5, released 29 April 2021

Review the changes that are in version 1.8.5 of the managed Istio add-on.

Previous version

1.8.4

Current version

1.8.5

Updates in this version

See the Istio release notes for Istio 1.8.5.

Resolves the following CVEs

For more information, see the Istio security bulletin 2021-003.

Change log for 1.8.4, released 23 March 2021

Review the changes that are in version 1.8.4 of the managed Istio add-on.

Previous version

1.8.3

Current version

1.8.4

Updates in this version

See the Istio release notes for Istio 1.8.4.

Resolves the following CVEs

Change log for 1.8.3, released 1 March 2021

Review the changes that are in version 1.8.3 of the managed Istio add-on.

Previous version

1.8.2

Current version

1.8.3

Updates in this version

See the Istio release notes for Istio 1.8.3.

Resolves the following CVEs

Change log for 1.8.2, released 25 January 2021

Review the changes that are in version 1.8.2 of the managed Istio add-on.

Previous version

1.8.1

Current version

1.8.2

Updates in this version

See the Istio release notes for Istio 1.8.2.

Resolves the following CVEs

Change log for 1.8.1, released 16 December 2020

Review the changes that are in version 1.8.1 of the managed Istio add-on.

Previous version
1.8.0
Current version
1.8.1
Updates in this version
See the Istio release notes for Istio 1.8.1.

Change log for 1.8.0, released 9 December 2020

Review the changes that are in version 1.8.0 of the managed Istio add-on.

Previous version

1.8.0

Current version

1.7.5

Updates in this version

See the Istio release notes for Istio 1.8.

If you created a custom IstioOperator (IOP) resource, remove the revision field from the resource before you update your add-on to version 1.8 so that the custom gateways use version 1.8 of istiod. After you update your Istio add-on, update the tag for any custom gateways to 1.8. All istio-monitoring support is removed, and in the managed-istio-custom ConfigMap, the istio-monitoring-components and istio-kiali-dashboard-viewOnlyMode options are unsupported. To use monitoring with Istio, you must install the Kiali, Prometheus, Jaeger, and Grafana components separately from the Istio add-on. For more information, see the Istio documentation.

The istio-meshConfig-enableTracing and istio-egressgateway-public-1-enabled optional settings are added to the managed-istio-custom ConfigMap resource.

Version 1.7 (unsupported)

Version 1.7 of the managed Istio add-on is unsupported. (: deprecated)

Change log for 1.7.8, released 10 March 2021

Review the changes that are in version 1.7.8 of the managed Istio add-on.

Previous version

1.7.7

Current version

1.7.8

Updates in this version

See the Istio release notes for Istio 1.7.8.

Resolves the following CVEs

Change log for 1.7.7, released 8 February 2021

Review the changes that are in version 1.7.7 of the managed Istio add-on.

Previous version

1.7.6

Current version

1.7.7

Updates in this version

See the Istio release notes for Istio 1.7.7.

Resolves the following CVEs

Change log for 1.7.6, released 16 December 2020

Review the changes that are in version 1.7.6 of the managed Istio add-on.

Previous version

1.7.5

Current version

1.7.6

Updates in this version

See the Istio release notes for Istio 1.7.6.

Resolves CVE-2020-28196.

Change log for 1.7.5, released 3 December 2020

Review the changes that are in version 1.7.5 of the managed Istio add-on.

Previous version
1.7.4
Current version
1.7.5
Updates in this version
See the Istio release notes for Istio 1.7.5.

Change log for 1.7.4, released 5 November 2020

Review the changes that are in version 1.7.4 of the managed Istio add-on.

Previous version

1.7.3

Current version

1.7.4

Updates in this version

See the Istio release notes for Istio 1.7.4.

Resolves the following CVEs

Change log for 1.7.3, released 06 October 2020

Review the changes that are in version 1.7.3 of the managed Istio add-on.

Previous version

1.7.2

Current version

1.7.3

Updates in this version

See the Istio release notes for Istio 1.7.3.

Updates Prometheus to version 2.21.0 and Jaeger to version 1.20.0. Note that these components are deprecated in version 1.7 of the Istio add-on and are automatically removed in version 1.8 of the Istio add-on.

Resolves the following CVEs

For more information, see the Istio security bulletin 2020-010.

Change log for 1.7.2, released 23 September 2020

Review the changes that are in version 1.7.2 of the managed Istio add-on.

Previous version
1.7.1
Current version
1.7.2
Updates in this version
See the Istio release notes for Istio 1.7.2.

Change log for 1.7.1, released 14 September 2020

Review the changes that are in version 1.7.1 of the managed Istio add-on.

Previous version
1.7.0
Current version
1.7.1
Updates in this version
See the Istio release notes for Istio 1.7.1.

Change log for 1.7.0, released 02 September 2020

Review the changes that are in version 1.7.0 of the managed Istio add-on.

Previous version

1.6.8

Current version

1.7.0

Updates in this version

See the Istio release notes for Istio 1.7.

All istio-monitoring support is deprecated in version 1.7 of the Istio add-on and is automatically removed in version 1.8 of the Istio add-on. To use monitoring with Istio, you must install the components separately from the Istio add-on.

For more information, see the Istio documentation.

The istio-ingressgateway-public-(n)-enabled and istio-ingressgateway-zone-(n) options in the managed-istio-custom ConfigMap resource are generally available for production use.

Version 1.6 (unsupported)

Version 1.6 of the managed Istio add-on is unsupported. (: deprecated)

Differences between version 1.6 of managed and community Istio

Review the following differences between the installation profiles of version 1.6 of the managed IBM Cloud Kubernetes Service Istio and version 1.6 of the community Istio.

To see options for changing settings in the managed version of Istio, see Customizing the Istio installation.

Table 1. Differences between the managed IBM Cloud Kubernetes Service Istio and the community Istio
Setting Differences in the managed Istio add-on
meshConfig.enablePrometheusMerge=true and values.telemetry.v2.enabled=true In the managed Istio add-on, support for telemetry with IBM Cloud Monitoring is enabled by default. This support can be disabled by customizing the Istio installation.
istio-ingressgateway and istio-egressgateway In the managed Istio add-on, placement of gateways on edge worker nodes is preferred, but not required.
Envoy sidecar proxy lifecycle pre-stop In the managed Istio add-on, a sleep time of 25 seconds is added to allow traffic connections to close before an Envoy sidecar is removed from an app pod.

Change log for 1.6.14, released 3 December 2020

Review the changes that are in version 1.6.14 of the managed Istio add-on.

Previous version

1.6.13

Current version

1.6.14

Updates in this version

See the Istio release notes for Istio 1.6.14.

Resolves CVE-2020-28196.

Change log for 1.6.13, released 5 November 2020

Review the changes that are in version 1.6.13 of the managed Istio add-on.

Previous version

1.6.12

Current version

1.6.13

Updates in this version

See the Istio release notes for Istio 1.6.13.

Resolves the following CVEs

Change log for 1.6.12, released 22 October 2020

Review the changes that are in version 1.6.12 of the managed Istio add-on.

Previous version
1.6.11
Current version
1.6.12
Updates in this version
See the Istio release notes for Istio 1.6.12.

Change log for 1.6.11, released 06 October 2020

Review the changes that are in version 1.6.11 of the managed Istio add-on.

Previous version

1.6.9

Current version

1.6.11

Updates in this version

See the Istio release notes for:

Updates Prometheus to version 2.21.0 and Jaeger to version 1.20.0. Note that these components are deprecated in version 1.7 of the Istio add-on and are automatically removed in version 1.8 of the Istio add-on.

Resolves the following CVEs

For more information, see the Istio security bulletin 2020-010.

Change log for 1.6.9, released 14 September 2020

Review the changes that are in version 1.6.9 of the managed Istio add-on.

Previous version

1.6.8

Current version

1.6.9

Updates in this version

See the Istio release notes for Istio 1.6.9.

Resolves the following CVEs

For more information, see the Istio security bulletin 2020-009.

Change log for 1.6.8, released 12 August 2020

Review the changes that are in version 1.6.8 of the managed Istio add-on.

Previous version

1.6.7

Current version

1.6.8

Updates in this version

See the Istio release notes for Istio 1.6.8.

Resolves CVE-2020-16844.

For more information, see the Istio security bulletin 2020-009

Change log for 1.6.7, released 04 August 2020

Review the changes that are in version 1.6.7 of the managed Istio add-on.

Previous version

1.6.5

Current version

1.6.7

Updates in this version

See the Istio release notes for:

Resolves the following CVEs

Change log for 1.6.5, released 17 July 2020

Review the changes that are in version 1.6.5 of the managed Istio add-on.

Previous version

1.6

Current version

1.6.5

Updates in this version

See the Istio release notes for Istio 1.6.5.

Resolves the following CVEs

For more information, see the Istio security bulletin 2020-008

Change log for 1.6, released 08 July 2020

Review the changes that are in version 1.6 of the managed Istio add-on.

Previous version

1.5.7

Current version

1.6

Updates in this version

See the Istio release notes for Istio 1.6.

Support is added for the istio-knative-cluster-local-gateway-enabled and istio-monitoring-telemetry options in the managed-istio-custom ConfigMap resource. You can use these options to manage inclusion of Knative apps in the service mesh and the Istio telemetry enablement. Support for IBM Cloud Monitoring is enabled for Istio by default.

Version 1.5 (unsupported)

Version 1.5 of the managed Istio add-on is unsupported. (: deprecated)

Differences between version 1.5 of managed and community Istio

Review the following differences between the installation profiles of version 1.5 of the managed IBM Cloud Kubernetes Service Istio and version 1.5 of the community Istio.

To see options for changing settings in the managed version of Istio, see Customizing the version 1.5 Istio installation.

Table 1. Differences between the managed IBM Cloud Kubernetes Service Istio and the community Istio
Setting Differences in the managed Istio add-on
egressGateways[name: istio-egressgateway].enabled: true In the managed Istio add-on, the egress gateway is enabled by default.
istiod, istio-ingressgateway, and istio-egressgateway In the managed Istio add-on, istiod and all Istio ingress and egress gateways are set up for basic high availability support. High availability support on these components includes the following settings by default: node anti-affinity, HorizontalPodAutoscaler, PodDisruptionBudget, and automatic scaling of replicas.
prometheus.enabled: false In the managed Istio add-on, the Prometheus, Grafana, Jaeger, and Kiali monitoring components are disabled by default due to current security concerns in the community release of Istio that can't be adequately addressed for a production environment.
values.global.pilot.enableProtocolSniffingForInbound and values.global.pilot.enableProtocolSniffingForOutbound In the managed Istio add-on, protocol sniffing is disabled by default until the feature becomes more stable in the community Istio.

Change log for 1.5.10, released 1 September 2020

Review the changes that are in version 1.5.10 of the managed Istio add-on.

Previous version
1.5.9
Current version
1.5.10
Updates in this version
See the Istio release notes for Istio 1.5.10.

Change log for 1.5.9, released 12 August 2020

Review the changes that are in version 1.6.8 of the managed Istio add-on.

Previous version

1.5.8

Current version

1.5.9

Updates in this version

See the Istio release notes for Istio 1.5.9.

Resolves the following CVEs

For more information, see the Istio security bulletin 2020-009.

Change log for 1.5.8, released 16 July 2020

Review the changes that are in version 1.5.8 of the managed Istio add-on.

Previous version

1.5.7

Current version

1.5.8

Updates in this version

See the Istio release notes for Istio 1.5.8.

Resolves the following CVEs

For more information, see the Istio security bulletin 2020-008.

Change log for 1.5.7, released 8 July 2020

Review the changes that are in version 1.5.7 of the managed Istio add-on.

Previous version

1.5.6

Current version

1.5.7

Updates in this version

See the Istio release notes for Istio 1.5.7.

Resolves the following CVEs

For more information, see the Istio security bulletin 2020-007.

Change log for 1.5.6, released 23 June 2020

Review the changes that are in version 1.5.6 of the managed Istio add-on.

Previous version

1.5.4

Current version

1.5.6

Updates in this version

See the Istio release notes for Istio 1.5.5 and Istio 1.5.6.

Resolves the following CVEs

For more information, see the Istio security bulletin 2020-006

Change log for 1.5, released 19 May 2020

Review the changes that are in version 1.5 of the managed Istio add-on.

Version 1.5 of the Istio add-on is supported for clusters that run Kubernetes versions 1.17 only.

Previous version

1.4.9

Current version

1.5

Updates in this version

See the Istio release notes for Istio 1.5.

The Citadel secret discovery service (SDS) is now enabled by default to provide identity provisioning and certification for workloads in the service mesh. With the managed-istio-custom ConfigMap resource, you can customize a set of Istio configuration options. These settings include extra control over monitoring, logging, and networking in your control plane and service mesh. Beta: By default, one public Istio load balancer, istio-ingressgateway, is enabled in your cluster. To achieve higher availability, you can now enable an Istio load balancer in each zone of your cluster. For more information, see Enabling or disabling public Istio load balancers. The Prometheus, Grafana, Jaeger, and Kiali monitoring components are disabled by default due to current security concerns in the community release of Istio that can't be adequately addressed for a production environment. If you use IBM Cloud Monitoring to monitor your Istio-managed apps, update the sysdig-agent ConfigMap so that sidecar metrics are tracked. Changes can't be made to the Kiali dashboard in view-only mode by default. You can change this setting by editing the managed-istio-custom ConfigMap. Your cluster must have a secret with credentials to Grafana to access the Grafana dashboard.

Version 1.4 (unsupported)

Version 1.4 of the managed Istio add-on is unsupported. (: deprecated)

Change log for 1.4.9, released 18 May 2020

Review the changes that are in version 1.4.9 of the managed Istio add-on.

Previous version

1.4.8

Current version

1.4.9

Updates in this version

See the Istio release notes for Istio 1.4.9.

Resolves the following CVEs

For more information, see the Istio security bulletin

Change log for 1.4.8, released 30 April 2020

Review the changes that are in version 1.4.8 of the managed Istio add-on.

Previous version

1.4.7

Current version

1.4.8

Updates in this version

See the Istio release notes for Istio 1.4.8.

Resolves the following CVEs

Change log for 1.4.7, released 01 April 2020

Review the changes that are in version 1.4.7 of the managed Istio add-on.

Previous version

1.4.6

Current version

1.4.7

Updates in this version

See the Istio release notes for Istio 1.4.7.

Resolves the following CVEs

Change log for 1.4.6, released 09 March 2020

Review the changes that are in version 1.4.6 of the managed Istio add-on.

Previous version

1.4.5

Current version

1.4.6

Updates in this version

See the Istio release notes for Istio 1.4.6.

Resolves the following CVEs

Change log for 1.4.5, released 21 February 2020

Review the changes that are in version 1.4.5 of the managed Istio add-on.

Previous version

1.4.4

Current version

1.4.5

Updates in this version

See the Istio release notes for Istio 1.4.5.

Resolves the following CVEs

Change log for 1.4.4, released 14 February 2020

Review the changes that are in version 1.4.4 of the managed Istio add-on.

Previous version

1.4.3

Current version

1.4.4

Updates in this version

See the Istio release notes for Istio 1.4.4.

Disables protocol sniffing and detection.

Improves the termination sequence for rolling updates of ingress and egress gateways.

Resolves the following CVEs

For more information, see the Istio security bulletin 2020-001

Change log for 1.4.3, released 16 January 2020

Review the changes that are in version 1.4.3 of the managed Istio add-on.

Previous version

1.4.2

Current version

1.4.3

Updates in this version

See the Istio release notes for Istio 1.4.3.

Disables protocol sniffing and detection.

Improves the termination sequence for rolling updates of ingress and egress gateways.

Change log for 1.4.2, released 16 December 2020

Review the changes that are in version 1.4.2 of the managed Istio add-on.

Previous version

1.4.0

Current version

1.4.2

Updates in this version

See the Istio release notes for Istio 1.4.2.

Resolves the following CVEs

For more information, see the Istio security bulletin.