Announcing Istio 1.21.1

This release implements the security updates described in our 8th of April post, ISTIO-SECURITY-2024-002 along with bug fixes to improve robustness.

This release note describes what’s different between Istio 1.21.0 and 1.21.1.

{{< relnote >}}

Changes

• Fixed a bug where VirtualServices containing duplicate hosts with different cases would cause routes to be rejected by Envoy. (Issue #49638)

• Fixed an issue where commands relying on Envoy config dump would not work due to the presence of ECDS config.

• Fixed an issue where telemetry EnvoyFilter resources were not correctly pruned during the installation process. (Issue #48126)

• Fixed an issue where pilot CPU consumption was abnormally high when the in-cluster analysis was enabled. (Issue #49340)

• Fixed an issue where updating a ServiceEntry's TargetPort would not trigger an xDS push. (Issue #49878)