Announcing Istio 1.21.1

Istio 1.21.1 patch release.

Apr 8, 2024

This release implements the security updates described in our 8th of April post, ISTIO-SECURITY-2024-002 along with bug fixes to improve robustness.

This release note describes what’s different between Istio 1.21.0 and 1.21.1.

BEFORE YOU UPGRADE

Things to know and prepare before upgrading.

DOWNLOAD

Download and install this release.

DOCS

Visit the documentation for this release.

SOURCE CHANGES

Inspect the full set of source code changes.

Changes

Fixed a bug where VirtualServices containing duplicate hosts with different cases would cause routes to be rejected by Envoy. (Issue #49638)
Fixed an issue where commands relying on Envoy config dump would not work due to the presence of ECDS config.
Fixed an issue where telemetry EnvoyFilter resources were not correctly pruned during the installation process. (Issue #48126)
Fixed an issue where pilot CPU consumption was abnormally high when the in-cluster analysis was enabled. (Issue #49340)
Fixed an issue where updating a ServiceEntry’s TargetPort would not trigger an xDS push. (Issue #49878)