Istio 1.0.8

This release includes several bug fixes and improvements to robustness. This release note describes what’s different between Istio 1.0.7 and Istio 1.0.8.

Bug fixes

  • Fix issue where Citadel could generate a new root CA if it cannot contact the Kubernetes API server, causing mutual TLS verification to incorrectly fail (Issue 14512).

Small enhancements

  • Update Citadel’s default root CA certificate TTL from 1 year to 10 years.