[release-1.23] 1.23.1 Release Notes (#15671)

* 1.23.1 Release Notes Apply suggestions from code review Co-authored-by: Daniel Hawton <daniel@hawton.org> * bump full_version to 1.23.1, make gen * Update content/en/news/releases/1.23.x/announcing-1.23.1/index.md Co-authored-by: Daniel Hawton <daniel@hawton.org> --------- Co-authored-by: Sumit Vij <sumitvij11+github@gmail.com> Co-authored-by: Daniel Hawton <daniel@hawton.org> Co-authored-by: Mike Morris <1149913+mikemorris@users.noreply.github.com>
istio · Sep 10, 2024 · 19aee55 · 19aee55
1 parent bdb91f4
commit 19aee55
Show file tree

Hide file tree

Showing 10 changed files with 72 additions and 35 deletions.
diff --git a/content/en/boilerplates/snips/args.sh b/content/en/boilerplates/snips/args.sh
@@ -29,5 +29,5 @@ ENDSNIP
 ENDSNIP
 
 ! IFS=$'\n' read -r -d '' bpsnip_args_istio_full_version <<\ENDSNIP
-1.23.0
+1.23.1
 ENDSNIP
diff --git a/content/en/boilerplates/snips/revision-tags-middle.sh b/content/en/boilerplates/snips/revision-tags-middle.sh
@@ -27,6 +27,6 @@ istioctl tag list
 ! IFS=$'\n' read -r -d '' bpsnip_revision_tags_middle__1_out <<\ENDSNIP
 TAG         REVISION NAMESPACES
 default     1-22-1   ...
-prod-canary 1-23-0   ...
+prod-canary 1-23-1   ...
 prod-stable 1-22-1   ...
 ENDSNIP
diff --git a/content/en/docs/ambient/install/helm/snips.sh b/content/en/docs/ambient/install/helm/snips.sh
@@ -56,10 +56,10 @@ helm ls -n istio-system
 
 ! IFS=$'\n' read -r -d '' snip_show_components_out <<\ENDSNIP
 NAME            NAMESPACE       REVISION    UPDATED                                 STATUS      CHART           APP VERSION
-istio-base      istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    base-1.23.0     1.23.0
-istio-cni       istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    cni-1.23.0      1.23.0
-istiod          istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    istiod-1.23.0   1.23.0
-ztunnel         istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    ztunnel-1.23.0  1.23.0
+istio-base      istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    base-1.23.1     1.23.1
+istio-cni       istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    cni-1.23.1      1.23.1
+istiod          istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    istiod-1.23.1   1.23.1
+ztunnel         istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    ztunnel-1.23.1  1.23.1
 ENDSNIP
 
 snip_check_pods() {
@@ -79,10 +79,10 @@ helm ls -n istio-system
 
 ! IFS=$'\n' read -r -d '' snip_uninstall_1_out <<\ENDSNIP
 NAME            NAMESPACE       REVISION    UPDATED                                 STATUS      CHART           APP VERSION
-istio-base      istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    base-1.23.0     1.23.0
-istio-cni       istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    cni-1.23.0      1.23.0
-istiod          istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    istiod-1.23.0   1.23.0
-ztunnel         istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    ztunnel-1.23.0  1.23.0
+istio-base      istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    base-1.23.1     1.23.1
+istio-cni       istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    cni-1.23.1      1.23.1
+istiod          istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    istiod-1.23.1   1.23.1
+ztunnel         istio-system    1           2024-04-17 22:14:45.964722028 +0000 UTC deployed    ztunnel-1.23.1  1.23.1
 ENDSNIP
 
 snip_delete_ingress() {

diff --git a/content/en/docs/setup/additional-setup/getting-started-istio-apis/snips.sh b/content/en/docs/setup/additional-setup/getting-started-istio-apis/snips.sh
@@ -26,7 +26,7 @@ curl -L https://istio.io/downloadIstio | sh -
 }
 
 snip_download_istio_2() {
-curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.23.0 TARGET_ARCH=x86_64 sh -
+curl -L https://istio.io/downloadIstio | ISTIO_VERSION=1.23.1 TARGET_ARCH=x86_64 sh -
 }
 
 snip_download_istio_4() {

diff --git a/content/en/docs/setup/install/helm/snips.sh b/content/en/docs/setup/install/helm/snips.sh
@@ -35,7 +35,7 @@ helm ls -n istio-system
 
 ! IFS=$'\n' read -r -d '' snip_installation_steps_4_out <<\ENDSNIP
 NAME       NAMESPACE    REVISION UPDATED                                 STATUS   CHART        APP VERSION
-istio-base istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.0  1.23.0
+istio-base istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.1  1.23.1
 ENDSNIP
 
 snip_install_discovery() {
@@ -48,8 +48,8 @@ helm ls -n istio-system
 
 ! IFS=$'\n' read -r -d '' snip_installation_steps_6_out <<\ENDSNIP
 NAME       NAMESPACE    REVISION UPDATED                                 STATUS   CHART         APP VERSION
-istio-base istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.0   1.23.0
-istiod     istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.0 1.23.0
+istio-base istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.1   1.23.1
+istiod     istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.1 1.23.1
 ENDSNIP
 
 snip_installation_steps_7() {
@@ -93,7 +93,7 @@ kubectl get deployments -n istio-system --output wide
 
 ! IFS=$'\n' read -r -d '' snip_installation_steps_8_out <<\ENDSNIP
 NAME     READY   UP-TO-DATE   AVAILABLE   AGE   CONTAINERS   IMAGES                         SELECTOR
-istiod   1/1     1            1           10m   discovery    docker.io/istio/pilot:1.23.0   istio=pilot
+istiod   1/1     1            1           10m   discovery    docker.io/istio/pilot:1.23.1   istio=pilot
 ENDSNIP
 
 snip_install_ingressgateway() {
@@ -107,8 +107,8 @@ helm ls -n istio-system
 
 ! IFS=$'\n' read -r -d '' snip_helm_ls_out <<\ENDSNIP
 NAME       NAMESPACE    REVISION UPDATED                                 STATUS   CHART         APP VERSION
-istio-base istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.0   1.23.0
-istiod     istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.0 1.23.0
+istio-base istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed base-1.23.1   1.23.1
+istiod     istio-system 1        2024-04-17 22:14:45.964722028 +0000 UTC deployed istiod-1.23.1 1.23.1
 ENDSNIP
 
 snip_delete_delete_gateway_charts() {

diff --git a/content/en/docs/setup/install/operator/snips.sh b/content/en/docs/setup/install/operator/snips.sh
@@ -153,21 +153,21 @@ istio-system   example-istiocontrolplane1-22-0              HEALTHY   11m
 ENDSNIP
 
 snip_canary_upgrade_init() {
-istio-1.23.0/bin/istioctl operator init --revision 1-23-0
+istio-1.23.1/bin/istioctl operator init --revision 1-23-1
 }
 
 snip_cat_operator_yaml() {
-cat example-istiocontrolplane-1-23-0.yaml
+cat example-istiocontrolplane-1-23-1.yaml
 }
 
 ! IFS=$'\n' read -r -d '' snip_cat_operator_yaml_out <<\ENDSNIP
 apiVersion: install.istio.io/v1alpha1
 kind: IstioOperator
 metadata:
   namespace: istio-system
-  name: example-istiocontrolplane-1-23-0
+  name: example-istiocontrolplane-1-23-1
 spec:
-  revision: 1-23-0
+  revision: 1-23-1
   profile: default
 ENDSNIP
 
@@ -177,7 +177,7 @@ kubectl get pod -n istio-system -l app=istiod
 
 ! IFS=$'\n' read -r -d '' snip_get_pods_istio_system_out <<\ENDSNIP
 NAME                             READY   STATUS    RESTARTS   AGE
-istiod-1-23-0-597475f4f6-bgtcz   1/1     Running   0          64s
+istiod-1-23-1-597475f4f6-bgtcz   1/1     Running   0          64s
 istiod-6ffcc65b96-bxzv5          1/1     Running   0          2m11s
 ENDSNIP
 
@@ -188,7 +188,7 @@ kubectl get services -n istio-system -l app=istiod
 ! IFS=$'\n' read -r -d '' snip_get_svc_istio_system_out <<\ENDSNIP
 NAME            TYPE        CLUSTER-IP       EXTERNAL-IP   PORT(S)                                         AGE
 istiod          ClusterIP   10.104.129.150   <none>        15010/TCP,15012/TCP,443/TCP,15014/TCP,853/TCP   2m35s
-istiod-1-23-0   ClusterIP   10.111.17.49     <none>        15010/TCP,15012/TCP,443/TCP,15014/TCP           88s
+istiod-1-23-1   ClusterIP   10.111.17.49     <none>        15010/TCP,15012/TCP,443/TCP,15014/TCP           88s
 ENDSNIP
 
 snip_delete_example_istiocontrolplane() {

diff --git a/content/en/docs/setup/upgrade/canary/snips.sh b/content/en/docs/setup/upgrade/canary/snips.sh
@@ -99,12 +99,12 @@ istioctl proxy-status | grep "\.test-ns "
 
 snip_usage_1() {
 istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-22-1 --set profile=minimal --skip-confirmation
-istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-23-0 --set profile=minimal --skip-confirmation
+istioctl install --set values.pilot.env.PILOT_ENABLE_CONFIG_DISTRIBUTION_TRACKING=true --revision=1-23-1 --set profile=minimal --skip-confirmation
 }
 
 snip_usage_2() {
 istioctl tag set prod-stable --revision 1-22-1
-istioctl tag set prod-canary --revision 1-23-0
+istioctl tag set prod-canary --revision 1-23-1
 }
 
 snip_usage_3() {
@@ -128,13 +128,13 @@ istioctl ps
 
 ! IFS=$'\n' read -r -d '' snip_usage_5_out <<\ENDSNIP
 NAME                                CLUSTER        CDS        LDS        EDS        RDS        ECDS         ISTIOD                             VERSION
-sleep-78ff5975c6-62pzf.app-ns-3     Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED     NOT SENT     istiod-1-23-0-7f6fc6cfd6-s8zfg     1.23.0
+sleep-78ff5975c6-62pzf.app-ns-3     Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED     NOT SENT     istiod-1-23-1-7f6fc6cfd6-s8zfg     1.23.1
 sleep-78ff5975c6-8kxpl.app-ns-1     Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED     NOT SENT     istiod-1-22-1-bdf5948d5-n72r2      1.22.1
 sleep-78ff5975c6-8q7m6.app-ns-2     Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED     NOT SENT     istiod-1-22-1-bdf5948d5-n72r2      1-22.1
 ENDSNIP
 
 snip_usage_6() {
-istioctl tag set prod-stable --revision 1-23-0 --overwrite
+istioctl tag set prod-stable --revision 1-23-1 --overwrite
 }
 
 snip_usage_7() {
@@ -148,13 +148,13 @@ istioctl ps
 
 ! IFS=$'\n' read -r -d '' snip_usage_8_out <<\ENDSNIP
 NAME                                                   CLUSTER        CDS        LDS        EDS        RDS          ECDS         ISTIOD                             VERSION
-sleep-5984f48bc7-kmj6x.app-ns-1                        Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED       NOT SENT     istiod-1-23-0-7f6fc6cfd6-jsktb     1.23.0
-sleep-78ff5975c6-jldk4.app-ns-3                        Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED       NOT SENT     istiod-1-23-0-7f6fc6cfd6-jsktb     1.23.0
-sleep-7cdd8dccb9-5bq5n.app-ns-2                        Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED       NOT SENT     istiod-1-23-0-7f6fc6cfd6-jsktb     1.23.0
+sleep-5984f48bc7-kmj6x.app-ns-1                        Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED       NOT SENT     istiod-1-23-1-7f6fc6cfd6-jsktb     1.23.1
+sleep-78ff5975c6-jldk4.app-ns-3                        Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED       NOT SENT     istiod-1-23-1-7f6fc6cfd6-jsktb     1.23.1
+sleep-7cdd8dccb9-5bq5n.app-ns-2                        Kubernetes     SYNCED     SYNCED     SYNCED     SYNCED       NOT SENT     istiod-1-23-1-7f6fc6cfd6-jsktb     1.23.1
 ENDSNIP
 
 snip_default_tag_1() {
-istioctl tag set default --revision 1-23-0
+istioctl tag set default --revision 1-23-1
 }
 
 snip_uninstall_old_control_plane_1() {

diff --git a/content/en/docs/setup/upgrade/helm/snips.sh b/content/en/docs/setup/upgrade/helm/snips.sh
@@ -78,15 +78,15 @@ helm upgrade istio-base istio/base --set defaultRevision=canary -n istio-system
 
 snip_usage_1() {
 helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-22-1 -n istio-system | kubectl apply -f -
-helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-canary}" --set revision=1-23-0 -n istio-system | kubectl apply -f -
+helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-canary}" --set revision=1-23-1 -n istio-system | kubectl apply -f -
 }
 
 snip_usage_2() {
-helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-23-0 -n istio-system | kubectl apply -f -
+helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{prod-stable}" --set revision=1-23-1 -n istio-system | kubectl apply -f -
 }
 
 snip_default_tag_1() {
-helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{default}" --set revision=1-23-0 -n istio-system | kubectl apply -f -
+helm template istiod istio/istiod -s templates/revision-tags.yaml --set revisionTags="{default}" --set revision=1-23-1 -n istio-system | kubectl apply -f -
 }
 
 snip_in_place_upgrade_1() {

diff --git a/content/en/news/releases/1.23.x/announcing-1.23.1/index.md b/content/en/news/releases/1.23.x/announcing-1.23.1/index.md
@@ -0,0 +1,37 @@
+---
+title: Announcing Istio 1.23.1
+linktitle: 1.23.1
+subtitle: Patch Release
+description: Istio 1.23.1 patch release.
+publishdate: 2024-09-10
+release: 1.23.1
+---
+
+This release note describes what is different between Istio 1.23.0 and 1.23.1.
+
+{{< relnote >}}
+
+## Changes
+
+- **Fixed** an issue where controller-assigned IPs did not respect per-proxy DNS capture the same way that ephemeral auto-allocated IPs did.
+  ([Issue #52609](https://github.com/istio/istio/issues/52609))
+
+- **Fixed** an issue where waypoints required DNS proxy to be enabled in order to consume auto-allocated IPs.
+  ([Issue #52746](https://github.com/istio/istio/issues/52746))
+
+- **Fixed** an issue where the `ISTIO_OUTPUT` `iptables` chain was not removed with `pilot-agent istio-clean-iptables` command.
+  ([Issue #52835](https://github.com/istio/istio/issues/52835))
+
+- **Fixed** an issue causing any `portLevelSettings` to be ignored in `DestinationRule`s for waypoints.
+  ([Issue #52532](https://github.com/istio/istio/issues/52532))
+
+- **Removed** writing `kubeconfig` to CNI net directory.
+  ([Issue #52315](https://github.com/istio/istio/issues/52315))
+
+- **Removed** `CNI_NET_DIR` from the `istio-cni` `ConfigMap`, as it now does nothing.
+  ([Issue #52315](https://github.com/istio/istio/issues/52315))
+
+- **Removed** a change in Istio 1.23.0 causing regressions for `ServiceEntries` with multiple addresses defined.
+  Note: the reverted change did fix an issue around missing addresses (#51747), but introduce a new set of issues.
+  The original issue can be worked around by creating a sidecar resource.
+  ([Issue #52944](https://github.com/istio/istio/issues/52944)),([Issue #52847](https://github.com/istio/istio/issues/52847))
diff --git a/data/args.yml b/data/args.yml
@@ -2,7 +2,7 @@
 version: "1.23"
 
 # The full Istio version identifier the docs describe
-full_version: "1.23.0"
+full_version: "1.23.1"
 
 # The previous Istio version identifier the docs describe, used for upgrade documentation
 previous_version: "1.22"
-Original file line number
+Diff line change
@@ Expand Up / @@ -29,5 +29,5 @@ ENDSNIP @@
     ENDSNIP
     ! IFS=$'\n' read -r -d '' bpsnip_args_istio_full_version <<\ENDSNIP
-.23.0
+.23.1
     ENDSNIP