Back to Istio Io

Announcing Istio 1.21.3

content/en/news/releases/1.21.x/announcing-1.21.3/index.md

latest1.1 KB
Original Source

This release implements the security updates described in our 4th of June post, ISTIO-SECURITY-2024-004 along with bug fixes to improve robustness.

This release note describes what’s different between Istio 1.21.2 and 1.21.3.

{{< relnote >}}

Changes

  • Fixed building of EDS-typed cluster endpoints with domain address. (Issue #50688)

  • Fixed custom injection of the istio-proxy container not working properly when SecurityContext.RunAs fields were set.

  • Fixed a regression in Istio 1.21.0 causing VirtualServices routing to ExternalName services to not work when ENABLE_EXTERNAL_NAME_ALIAS=false was configured.

  • Fixed list matching for the audience claims in JWT tokens. (Issue #49913)

  • Fixed a behavioral change in Istio 1.20 that caused merging of ServiceEntries with the same hostname and port names to give unexpected results. (Issue #50478)