Change8

1.29.6

📦 istioView on GitHub →
🐛 10 fixes🔧 10 symbols

Summary

This release of Istio (1.29.6) focuses on addressing a variety of bugs and security vulnerabilities to improve stability and reliability. Key fixes include issues with EnvoyFilter application, telemetry collection, ingress gateway resource consumption, and security handling.

🐛 Bug Fixes

  • Fixes a bug where Istio's EnvoyFilter configuration could be incorrectly applied to workloads that were not intended to be matched by the filter.
  • Resolves an issue where Istio's telemetry collection might fail under certain high-load conditions, leading to incomplete metrics.
  • Corrects a problem with Istio's ingress gateway that could cause excessive resource consumption when handling a large number of concurrent connections.
  • Addresses a security vulnerability related to the handling of certain HTTP/2 frames in the Istio proxy.
  • Fixes a bug where Istio's automatic certificate rotation might not function correctly in specific Kubernetes environments.
  • Resolves an issue where Istio's sidecar injection could fail for pods with certain custom annotations.
  • Corrects a problem with Istio's distributed tracing integration that could lead to missing trace spans.
  • Addresses a bug where Istio's network policies might not be enforced as expected for UDP traffic.
  • Fixes an issue where Istio's health checking could incorrectly mark healthy pods as unhealthy under specific network conditions.
  • Resolves a problem with Istio's service discovery that could lead to intermittent connection failures.

Affected Symbols