1.10.0

New Features

• Remove Istio version v1alpha1 from the CRD #1062
• Now, the istio-system namespace is created as part of the module's manifest (#1076). See the following decision for namespace labeling.
• Remove support for the istio-operator.kyma-project.io/disable-external-name-alias annotation #1071

Versions

• Istio: 1.23.2
• Envoy: 1.31.2

Full changelog: 1.9.0...1.10.0

1.9.0

Deprecation

The annotation disable-external-name-alias has become deprecated. For SAP BTP, Kyma runtime users it is scheduled to be deleted on 04.11 in the fast channel and on 18.11 in the regular channel. The Istio module introduced the annotation to prevent Istio from treating a Service of type ExternalName as an alias of the Service that it points to. If you are using the annotation, see the migration guide.

New Features

• During the Istio upgrade, Pods with the Istio sidecar proxies are now divided into smaller groups and restarted in multiple reconciliations instead of all at once. This increases the stability and reliability of the reconciliation for the Istio module's operator. See issue #155.
• We've updated the Istio version to 1.23.2 (#1024). Read the Istio 1.23.2 release announcement and Istio 1.23.0 Change Notes. Take note of the following breaking changes included in the new minor version of Istio:
  • Deferred cluster creation: In the context of Envoy, a cluster is a group of logically similar upstream hosts that Envoy connects to. Typically, clusters are defined and created at startup. This means that regardless of whether or not a cluster will be used during the lifetime of the Envoy process, it will still be initialized. Envoy has introduced a new optimization that allows these clusters to be created on the worker threads inline during requests, which can save memory and CPU cycles. If you rely on the old behavior, consider using the compatibility mode, which disables the deferred cluster creation feature by setting ENABLE_DEFERRED_CLUSTER_CREATION to false.
  • Updates to Envoy cluster metrics parsing: Previously, the Envoy cluster metrics for services that did not use the .svc.cluster.local suffix were incorrectly truncated and parsed. This was because Envoy cluster metrics use dots . as a delimiter between metric namespaces. It is impossible to properly distinguish between those delimiters and the dots in hostnames or cluster names. To address this, the regex for parsing cluster_name has been updated to look for a semicolon that indicates the end of a cluster's name. If you have any dependency on the full stat name for cluster metrics, you must update your monitoring system to account for this change. If you require more time to make adjustments, consider using the compatibility mode, which reverts this behavior by setting ENABLE_DELIMITED_STATS_TAG_REGEX to false.

Versions

• Istio: 1.23.2
• Envoy: 1.31.2

Full changelog: 1.8.0...1.9.0

1.8.3

New features

• The self-signed CA certificate's bit length is now set to 4096 instead of the default 2048. #984

Versions

• Istio: 1.22.3
• Envoy: 1.30.5

Full changelog: 1.8.2...1.8.3

1.8.2

New Features

• Update the Istio version to 1.22.3 #958. Read Istio 1.22.3 Release Announcement.

Versions

• Istio: 1.22.3
• Envoy: 1.30.5

Full changelog: 1.8.1...1.8.2

1.8.1

New Features

• Update the Istio version to 1.22.2 #912. Read Istio 1.22.2 Release Announcement.

Versions

• Istio: 1.22.2
• Envoy: 1.30.3

Full changelog: 1.8.0...1.8.1

1.8.0

New Features

• Update the Istio version to 1.22.1 #887. Read Istio 1.22.0 Release Announcement, 1.22.0 Change Notes, 1.22.0 Upgrade Notes, and Istio 1.22.1 Release Announcement.

Versions

• Istio: 1.22.1
• Envoy: 1.30.2

Full changelog: 1.7.0...1.8.0

1.7.0

New Features

• Update the Istio version to 1.21.3 #877. Read Istio 1.21.3 Release Announcement and Change Notes for more details.
• Allow for opting out of the ENABLE_EXTERNAL_NAME_ALIAS Istio pilot environment variable in the Istio custom resource. This allows for retaining behavior that was present in Istio prior to version 1.21. See issue #787.
• Add Request Authentication UI for Kyma dashboard #816
• Now, Istio Operator does not restart Pods with Istio Sidecar, which contain custom image annotations. See the issue #698 and Istio Resource Annotations for more details.
• Change Istio Ingress Gateway's scaling to be based only on CPU utilization. This adjustment ensures that the scaling is more responsive to traffic changes, as the Istio Ingress Gateway memory utilization is not a good indicator of the traffic load.
• Set the default number of Istio Ingress Gateway replicas in smaller clusters to 1.
• Introduce the compatibility mode. Check the issue #801 and the PR #849 for more details.

Versions

• Istio: 1.21.3
• Envoy: 1.29.5

Full changelog: 1.6.4...1.7.0

1.6.4

New Features

• Update the Istio version to 1.21.3 #877. Read Istio 1.21.3 Release Announcement and Change Notes for more details.

Full changelog: 1.6.3...1.6.4

1.6.3

Bugfixes

• Decrease the amount of memory used by Istio Operator during reconciliation.
• Switch the URL for Telemetries in Busola UI.

Full changelog: 1.6.2...1.6.3

1.6.2

New Features

• Allow for opting out of the ENABLE_EXTERNAL_NAME_ALIAS Istio pilot environment variable in the Istio custom resource. This allows for retaining behavior that was present in Istio prior to version 1.21. See issue #787.
• Update the Istio version to 1.21.2 #802. Read Istio 1.21.2 Release Announcement and Change Notes for more details.

Full changelog: 1.6.1...1.6.2