Pulse · istio/istio · GitHub

8000 Pulse · istio/istio · GitHub

More Web Proxy on the site http://driver.im/

June 27, 2025 – July 4, 2025

Overview

47 Active pull requests

47 Active issues

38 Pull requests merged by 15 people

Automator: update proxy@master in istio/istio@master
#56879 merged Jul 4, 2025
Automator: update proxy@master in istio/istio@master
#56870 merged Jul 3, 2025
add additional tests for server tls settings
#56641 merged Jul 3, 2025
remove unnecessary loop and condition evaluation
#56533 merged Jul 3, 2025
feedback and cleanup
#56866 merged Jul 3, 2025
Automator: update proxy@master in istio/istio@master
#56863 merged Jul 2, 2025
[release-1.26] Add domain resolve to Ambient TestServiceEntrySelectsWorkloadEntry test
#56862 merged Jul 2, 2025
Add domain resolve to Ambient TestServiceEntrySelectsWorkloadEntry test
#56861 merged Jul 2, 2025
[release-1.25] pilot: reinitialize telemetry when service changed
#56857 merged Jul 2, 2025
[release-1.26] pilot: reinitialize telemetry when service changed
#56858 merged Jul 2, 2025
pilot: reinitialize telemetry when service changed
#56827 merged Jul 2, 2025
Allow RequestAuthentication policy without an issuer specified
#56158 merged Jul 2, 2025
enable v1beta1.clustertrustbundle
#56852 merged Jul 1, 2025
Update BASE_VERSION to master-2025-07-01T19-01-28
#56850 merged Jul 1, 2025
feat: allow for PDB configuration
#56630 merged Jul 1, 2025
Stop reading configmaps from remote clusters
#56838 merged Jul 1, 2025
test: adds integration test for CRL
#56766 merged Jul 1, 2025
Add releasenote and disable gw-inference by default
#56848 merged Jul 1, 2025
Automator: update proxy@master in istio/istio@master
#56846 merged Jul 1, 2025
Automator: update common-files@master in istio/istio@master
#56834 merged Jul 1, 2025
improve istioctl dashboard example
#56842 merged Jul 1, 2025
Automator: update ztunnel@master in istio/istio@master
#56840 merged Jul 1, 2025
fix(gw-inference): Shadow service should only exist if it has to
#56839 merged Jun 30, 2025
fix(gw-inference): Refactored InferencePool Collection
#56831 merged Jun 30, 2025
Automator: update istio/client-go@master dependency in istio/istio@master
#56835 merged Jun 30, 2025
Revert "feat: represent revision tags using services"
#56833 merged Jun 30, 2025
add failuremode support on inferencepool
#56819 merged Jun 30, 2025
Inference pool Status handling and cross namespace references
#56792 merged Jun 30, 2025
Create Istio owned CNI config
#56156 merged Jun 30, 2025
feat(gw-inference): Add support for InferencePool reference grants
#56832 merged Jun 30, 2025
Automator: update proxy@master in istio/istio@master
#56829 merged Jun 30, 2025
[release-1.26] CNI Pod delete edge case
#56768 merged Jun 30, 2025
Automator: update proxy@master in istio/istio@master
#56823 merged Jun 29, 2025
Automator: update proxy@master in istio/istio@master
#56822 merged Jun 29, 2025
Automator: update go-control-plane in istio/istio@master
#56821 merged Jun 29, 2025
Add annotation support to deployment object in istio discovery chart
#56787 merged Jun 29, 2025
Automator: update proxy@master in istio/istio@master
#56813 merged Jun 28, 2025
tcp/tls route: fix multiple parent binds
#56818 merged Jun 28, 2025

9 Pull requests opened by 8 people

Handle ErrDumpInterrupted and update netlink package
#56824 opened Jun 30, 2025
Filter out invalid certs.
#56830 opened Jun 30, 2025
Ambient Multicluster SplitHorizon WDS Implementation
#56844 opened Jul 1, 2025
Move Alpha Gateway API Inference Extension support to master
#56845 opened Jul 1, 2025
feat: represent revision tags using services
#56851 opened Jul 1, 2025
integ: add support for ClusterTrustBundle
#56853 opened Jul 1, 2025
support specifying proxy admin port for describe
#56854 opened Jul 2, 2025
istioctl: use default revision automatically when --revision is not set
#56874 opened Jul 3, 2025
manifests: add default NetworkPolicy for istiod
#56878 opened Jul 4, 2025

31 Issues closed by 15 people

istioctl manifest -f ... -f... merging multiple files behavior has changed since 1.24.0
#55615 closed Jul 5, 2025
The policy lookupNamespaces not consistent for authz and authn policy
#54168 closed Jul 5, 2025
Native Sidecars draining erroneously sending connection: close for outbound requests
#51855 closed Jul 4, 2025
Inconsistent documentation for DNS proxy
#54761 closed Jul 3, 2025
Unit tests always fail when running `make test`
#55584 closed Jul 3, 2025
[Ambient] Multiple mesh in the same cluster does not work
#55440 closed Jul 3, 2025
Duplicate, closing
#56859 closed Jul 2, 2025
If OTLP endpoint is created after Istio telemetry resource i 8000 s created then the Istio access logs are never sent to the OTLP endpoint
#56825 closed Jul 2, 2025
jwt policy should not require "issuer"
#14400 closed Jul 2, 2025
Upgrade to istio 1.22.8 from 1.17.2, error toJsonMAP
#55434 closed Jul 2, 2025
istio-init container binary corruption - "exec /usr/local/bin/pilot-agent: exec format error"
#55570 closed Jul 2, 2025
Change in Retry Log Behavior in Istio 1.24 and 1.25
#55554 closed Jul 2, 2025
Issue with Istio ServiceEntry: Same Host, Different Port, and Resolutions
#54988 closed Jul 2, 2025
Different discovery selectors for Multicluster remote clusters
#54402 closed Jul 2, 2025
Ambient mode: h2UpgradePolicy in DestinationRule forces h2c over HBONE (waypoint to pod communication)
#54125 closed Jul 2, 2025
unable to drain k8s node running Istio components with PDB
#12602 closed Jul 1, 2025
Helm Chart Enhancement: Ability to specify maxUnavailable in Pod Disruption Budget for istiod deployment
#56547 closed Jul 1, 2025
Do not read configmaps from remote clusters
#56836 closed Jul 1, 2025
CRL integration test
#56529 closed Jul 1, 2025
[gw-inference] InferencePool Controller alignment
#56621 closed Jul 1, 2025
[DualStack] serviceEntry addresses have only the last address translated to envoy config
#56783 closed Jul 1, 2025
Issue to the X-request-ID updated by Envoy
#55558 closed Jul 1, 2025
Envoy drops packets
#55551 closed Jul 1, 2025
Circuit Breaker with external service (ServiceEntry)
#55516 closed Jul 1, 2025
Multi primary model integrated with multi remote (multi cluster)
#56828 closed Jul 1, 2025
[gw-inference] support configurable failureMode
#56622 closed Jun 30, 2025
Faulty regex in VirtualService blocking Route discovery service
#56807 closed Jun 30, 2025
Implement RetryBudget in Gateway API
#55838 closed Jun 30, 2025
[release-1.26] fix injection template for ClusterTrustBundle
#56745 closed Jun 30, 2025
Support mirrorPercentage for Gateway API resources
#49999 closed Jun 30, 2025
TCPRoute doesn't bind to multiple parents
#56769 closed Jun 28, 2025

16 Issues opened by 15 people

istioctl xDS Output in YAML/JSON Format
#56880 opened Jul 4, 2025
Ship with (optional) default NetworkPolicy resources
#56877 opened Jul 4, 2025
Continue Enhance Integration Test (previous issue #53990)
#56876 opened Jul 4, 2025
AuthorizationPolicy Breaks on JWT Scope with Space-Separated Values After Istio Update
#56873 opened Jul 3, 2025
Unable to connect to Crossplane Function when using Istio
#56871 opened Jul 3, 2025
Confirm support for HTTPRouteRule and GRPCRouteRule `name` field in new conformance tests
#56869 opened Jul 3, 2025
preserveHttp1HeaderCase do not work
#56868 opened Jul 3, 2025
Bad ServiceEntry blocks Istio Sidecar Ready
#56865 opened Jul 2, 2025
Better gRPC/long live connections load balancing support in ztunnel -> waypoint proxy
#56864 opened Jul 2, 2025
DNS SRV discovery (dnssrv+) breaks in Ambient Mesh — dns+ workaround required for gRPC service discovery (Thanos)
#56860 opened Jul 2, 2025
Istio Vm Integration not routing data plane through east-west gateway
#56855 opened Jul 2, 2025
Write CRL integration test with multiple control planes
#56849 opened Jul 1, 2025
Unable to override max_connections_to_accept_per_socket_event per workload in Istio 1.26
#56847 opened Jul 1, 2025
istio serviceentry external type dns NXDOMAIN bug
#56843 opened Jul 1, 2025
Vulnerability on istio project
#56841 opened Jul 1, 2025
ServiceEntry hostname conflicts across namespaces cause incorrect egress gateway routing
#56826 opened Jun 30, 2025

79 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

ServiceScope Implementation
#56497 commented on Jul 4, 2025 • 38 new comments
Native nftables support for sidecar mode
#56487 commented on Jul 2, 2025 • 5 new comments
rewrite probe only when the port needs to be intercepted
#56387 commented on Jun 30, 2025 • 4 new comments
fix: issue where selector flag of admin log cannot be empty
#56449 commented on Jul 1, 2025 • 3 new comments
Introducing CNI build for Windows
#56638 commented on Jul 1, 2025 • 1 new comment
Change host iptables rule addition from Append to Insert to ensure Istio's rules take precedence
#56414 commented on Jul 4, 2025 • 1 new comment
Memory Allocator Manager bytes_to_release not functioning
#55800 commented on Jul 5, 2025 • 0 new comments
How to setup authentication to jaeger ui which is behind istio vs
#55791 commented on Jul 5, 2025 • 0 new comments
Service Entry DNS is not resolving when the resolution is None
#55788 commented on Jul 5, 2025 • 0 new comments
Multiple serviceentries to same host at different ports
#55776 commented on Jul 5, 2025 • 0 new comments
setting "retry perTryTimeout: 2s" will make normal api timeout 2s
#55748 commented on Jul 5, 2025 • 0 new comments
HTTP/2 Connection Reuse Causes 404 NR in Istio with native Kubernetes Gateway API
#55732 commented on Jul 5, 2025 • 0 new comments
[release-1.25] add status for when ap is not in root ns and gw class target ref is used
#55726 commented on Jul 5, 2025 • 0 new comments
remoteIpBlocks does not work as expected when X-Forwarded-For header contains multiple IPs
#55722 commented on Jul 5, 2025 • 0 new comments
Remove support for Gateway API v1beta* resources graduated to v1
#55718 commented on Jul 5, 2025 • 0 new comments
ServiceEntry for external HTTPS proxy with multiple CIDRs not working as expected
#55716 commented on Jul 5, 2025 • 0 new comments
Migrate istio operator to helm inplace
#55712 commented on Jul 5, 2025 • 0 new comments
ServiceEntry Endpoints Shared Across Different exportTo Namespaces
#55714 commented on Jul 5, 2025 • 0 new comments
No way to overlay revision based MutatingWebhook
#55708 commented on Jul 5, 2025 • 0 new comments
[release-1.23] Fix broken IstioCNI config for enabling repair mode
#55704 commented on Jul 5, 2025 • 0 new comments
Istio DNS Gateway Hairpining Issues
#55701 commented on Jul 5, 2025 • 0 new comments
Copying remote certs for external control plane setup always errors out
#55698 commented on Jul 5, 2025 • 0 new comments
istio-ca-root-cert CM not created in revisioned CPs with different DiscoverySelectors
#56594 commented on Jul 3, 2025 • 0 new comments
option to reorder of native sidecar containers based on proxy location
#56817 commented on Jul 1, 2025 • 0 new comments
Fix WasmPlugin url validation
#56774 commented on Jul 2, 2025 • 0 new comments
add clusterTrustBundle in feature table
#56739 commented on Jul 4, 2025 • 0 new comments
Helm Chart Updates - istio-cni & ztunnel
#56697 commented on Jul 2, 2025 • 0 new comments
support reset log level or stack trace level separately for admin log
#56642 commented on Jul 1, 2025 • 0 new comments
Fix VerifyIptablesState ignoring IPv4 state in favor of the IPv6 one
#56626 commented on Jul 3, 2025 • 0 new comments
Fix e2e tests when using '--istio.test.revisions' to specify multiple revisions
#56548 commented on Jul 1, 2025 • 0 new comments
Support native sidecar by default
#56428 commented on Jun 28, 2025 • 0 new comments
fix: fixed ambient (l4) respect WorkloadEntry ports map for service port name
#56396 commented on Jul 5, 2025 • 0 new comments
pilot: include extra trust domains in cluster SANs verification
#56371 commented on Jul 5, 2025 • 0 new comments
Fix maps size computation for allocation may overflow
#56337 commented on Jul 5, 2025 • 0 new comments
Add integration test for ztunnel secure metrics
#56206 commented on Jul 5, 2025 • 0 new comments
integration tests: remove Config.Values
#56112 commented on Jul 5, 2025 • 0 new comments
istioctl ztunnel: add counters to policies
#56027 commented on Jul 5, 2025 • 0 new comments
Enforce FIPS-202205 compliance policy
#55949 commented on Jul 5, 2025 • 0 new comments
Make waypoint terminationGracePeriods configurable
#55799 commented on Jun 30, 2025 • 0 new comments
support delete waypoint for istioctl uninstall
#55003 commented on Jul 5, 2025 • 0 new comments
VirtualService doesn't work with Istio Ambient when Waypoint is K8s Gatway API Gateway
#56773 commented on Jul 2, 2025 • 0 new comments
connection outage after upgrading to AMI2023
#55605 commented on Jul 2, 2025 • 0 new comments
Istio Ambient Mesh - error="connection failed: deadline has elapsed" traffic not routed
#56729 commented on Jul 2, 2025 • 0 new comments
Dual-stack : Promote to Beta - Status Tracker
#54127 commented on Jul 2, 2025 • 0 new comments
Misconfigured meshConfig fails silently
#48991 commented on Jul 2, 2025 • 0 new comments
Support Rate Limiting using Gateway API Extensions
#43295 commented on Jul 2, 2025 • 0 new comments
wasm: providing platform-native authentication for downloading wasm OCI images on private registry
#43080 commented on Jul 1, 2025 • 0 new comments
Egress gateway doesn't work in multiple scenarios
#56743 commented on Jul 1, 2025 • 0 new comments
Ambient: leaked pod in snapshot, leading to ztunnel failing to startup
#53371 commented on Jul 1, 2025 • 0 new comments
[ambient] conditionally route traffic through the waypoint proxy
#56805 commented on Jul 1, 2025 • 0 new comments
[gw-inference] GIE conformance reporting
#56730 commented on Jul 1, 2025 • 0 new comments
Invalid Cert Chain when using Plug in CA Certificates
#39001 commented on Jul 1, 2025 • 0 new comments
Investigate and Adopt KEP 3157 Watch List in Istio
#54344 commented on Jul 1, 2025 • 0 new comments
Adopt new TLSRoute semantics
#55728 commented on Jul 1, 2025 • 0 new comments
Ambient: iptables inconsistently missing for pod(s) upon node reboot
#55968 commented on Jun 30, 2025 • 0 new comments
Istio does not parse certs with negative serial numbers
#56815 commented on Jun 30, 2025 • 0 new comments
Can istio-cni ignore exceptions when adding IPs to the ipset?
#56570 commented on Jun 30, 2025 • 0 new comments
Gateway API: hostnames in HTTPRoute make no effect
#49973 commented on Jun 30, 2025 • 0 new comments
istio-cni-node DaemonSet - ArgoCD OutOfSync
#56714 commented on Jun 30, 2025 • 0 new comments
Log file output path causes error due to read-only root filesystem in default pod security context
#55694 commented on Jul 5, 2025 • 0 new comments
Sidecar injector not idempotent
#55691 commented on Jul 5, 2025 • 0 new comments
Sidecar regex for namespace name
#55678 commented on Jul 5, 2025 • 0 new comments
Retry policy for inbound requests causes sidecar memory to constantly increase
#55674 commented on Jul 5, 2025 • 0 new comments
[release-1.25] Bug Fix - Add Handling of `GatewayClass` to `WaypointPolicyStatusCollection`
#55673 commented on Jul 5, 2025 • 0 new comments
istio-cni and ztunnel can fail on EC2 nodes which handles many connections
#55668 commented on Jul 5, 2025 • 0 new comments
aks istion asm-1-23 with kubernetes gateway api - download file gives protocol mismatch error
#55656 commented on Jul 5, 2025 • 0 new comments
Support HTTP/2 Ping in DestinationRule
#55640 commented on Jul 5, 2025 • 0 new comments
1.25.0 - Unable to add pods to ambient mesh with `RULE_APPEND failed (Operation not supported): rule in chain ISTIO_OUTPUT`
#55636 commented on Jul 5, 2025 • 0 new comments
Istio Ambient mode - Routing egress traffic to wildcard destinations
#54540 commented on Jul 5, 2025 • 0 new comments
Ambient conflicting with Cilium (AWS VPC CNI Chaining)
#54522 commented on Jul 5, 2025 • 0 new comments
TLS Origination should use ALPN upstream protocol selection
#54514 commented on Jul 5, 2025 • 0 new comments
Breaking change in the netlink package
#55707 commented on Jul 4, 2025 • 0 new comments
istioctl: automatically set revision to default revision
#54518 commented on Jul 3, 2025 • 0 new comments
Gateway deployer runs deployment loop on each Gateway status update
#56795 commented on Jul 3, 2025 • 0 new comments
Multicluster: graceful update of clusters
#49349 commented on Jul 3, 2025 • 0 new comments
[1.25.1] Ztunnel fails with 'failed to bind to address [::1]:15053: Cannot assign requested address'
#55794 commented on Jul 3, 2025 • 0 new comments
serviceEntry addresses only the last address is effective,can not find other address config in envoy config
#34577 commented on Jul 3, 2025 • 0 new comments
Slow start: aggression less than 1
#55153 commented on Jul 3, 2025 • 0 new comments
Add "ignoreAuthorityCase" similar to "ignoreUriCase" in VirtualService authority match
#56801 commented on Jul 3, 2025 • 0 new comments

0