Announcing Istio 1.0.8

We're pleased to announce the availability of Istio 1.0.8. Please see below for what's changed.

{{< relnote >}}

Bug fixes

• Fix issue where Citadel could generate a new root CA if it cannot contact the Kubernetes API server, causing mutual TLS verification to incorrectly fail (Issue 14512).

Small enhancements

• Update Citadel's default root CA certificate TTL from 1 year to 10 years.