-
Notifications
You must be signed in to change notification settings - Fork 8k
Insights: istio/istio
Overview
Could not load contribution data
Please try again later
57 Pull requests merged by 19 people
-
tcp/tls route: fix multiple parent binds
#56818 merged
Jun 28, 2025 -
add gateway implementation for retry budget
#56808 merged
Jun 27, 2025 -
fix dns althost name generation
#56806 merged
Jun 27, 2025 -
Automator: update proxy@release-1.25 in istio/istio@release-1.25
#56811 merged
Jun 27, 2025 -
Automator: update proxy@release-1.24 in istio/istio@release-1.24
#56812 merged
Jun 27, 2025 -
tests: assign privileged SCC to tproxy SA on OpenShift
#56799 merged
Jun 27, 2025 -
Automator: update proxy@release-1.26 in istio/istio@release-1.26
#56810 merged
Jun 27, 2025 -
manifests: refactor conditions for tproxy and capNetBindService
#56809 merged
Jun 27, 2025 -
[release-1.26] Gateway: provide stable HTTPRoute status ordering
#56802 merged
Jun 27, 2025 -
[release-1.26] do not use discovery filter for system namespace network
#56797 merged
Jun 27, 2025 -
[release-1.25] do not use discovery filter for system namespace network
#56796 merged
Jun 27, 2025 -
[release-1.26] status: fix busyloop
#56800 merged
Jun 27, 2025 -
Automator: update ztunnel@master in istio/istio@master
#56803 merged
Jun 27, 2025 -
replace label-based gateway opt in
#56778 merged
Jun 26, 2025 -
Gateway: provide stable HTTPRoute status ordering
#56504 merged
Jun 26, 2025 -
status: fix busyloop
#56798 merged
Jun 26, 2025 -
Automator: update proxy@master in istio/istio@master
#56794 merged
Jun 26, 2025 -
do not use discovery filter for system namespace network
#56687 merged
Jun 26, 2025 -
Automator: update istio/client-go@master dependency in istio/istio@master
#56790 merged
Jun 26, 2025 -
Do not transitively import net/trace
#56637 merged
Jun 26, 2025 -
Automator: update proxy@master in istio/istio@master
#56789 merged
Jun 26, 2025 -
Automator: update common-files@master in istio/istio@master
#56788 merged
Jun 26, 2025 -
[release-1.26] Add domain resolve to Ambient TestServiceEntryInlinedWorkloadEntry test
#56791 merged
Jun 26, 2025 -
Add domain resolve to Ambient TestServiceEntryInlinedWorkloadEntry test
#56784 merged
Jun 26, 2025 -
[release-1.26] add release notes for ClusterTrustBundle
#56785 merged
Jun 26, 2025 -
Automator: update proxy@release-1.26 in istio/istio@release-1.26
#56786 merged
Jun 26, 2025 -
add release notes for ClusterTrustBundle
#56748 merged
Jun 26, 2025 -
[release-1.26] fix clusterTrustBundle template
#56747 merged
Jun 26, 2025 -
[release-1.26] fix clustertrustbundles rbac
#56746 merged
Jun 26, 2025 -
Impl RetryBudget in DestinationRule
#56782 merged
Jun 26, 2025 -
Automator: update istio/client-go@master dependency in istio/istio@master
#56781 merged
Jun 26, 2025 -
Update client go
#56780 merged
Jun 26, 2025 -
feat: represent revision tags using services
#56141 merged
Jun 26, 2025 -
Add inferencepools by gateways index
#56777 merged
Jun 25, 2025 -
fix(gw-inference): Add extra to the VirtualService Config clone/copy
#56775 merged
Jun 25, 2025 -
Fix Gateway API tests to consider istio test cli flags
#56704 merged
Jun 25, 2025 -
Automator: update proxy@master in istio/istio@master
#56771 merged
Jun 25, 2025 -
Multicluster AmbientIndex
#56395 merged
Jun 24, 2025 -
Add support for OPTIONAL_MUTUAL to Gateway API
#56742 merged
Jun 24, 2025 -
Automator: update proxy@master in istio/istio@master
#56732 merged
Jun 24, 2025 -
CNI Pod delete edge case
#56738 merged
Jun 24, 2025 -
ensure consistency in inject label validation
#56737 merged
Jun 24, 2025 -
Initial support for ListenerSet
#55595 merged
Jun 24, 2025 -
feat: better istioctl ps output
#56441 merged
Jun 24, 2025 -
revert istio-remote service when profil=remote
#56524 merged
Jun 24, 2025 -
Remove unused multiCluster values
#56736 merged
Jun 24, 2025 -
Automator: update ztunnel@master in istio/istio@master
#56744 merged
Jun 24, 2025 -
tls: add PQC compliance policy
#56331 merged
Jun 24, 2025 -
Refactor inference extension support to krt
#56656 merged
Jun 23, 2025 -
Fix prepetual out of sync status within argocd
#56695 merged
Jun 23, 2025 -
wasmplugin: Allow configuration of fail reload strategy
#55604 merged
Jun 23, 2025 -
support ClusterTrustBundle to v1beta1 API
#56727 merged
Jun 23, 2025 -
Automator: update proxy@master in istio/istio@master
#56726 merged
Jun 22, 2025 -
Automator: update proxy@master in istio/istio@master
#56725 merged
Jun 22, 2025 -
Automator: update go-control-plane in istio/istio@master
#56724 merged
Jun 22, 2025 -
Automator: update proxy@release-1.26 in istio/istio@release-1.26
#56717 merged
Jun 21, 2025 -
Automator: update ztunnel@release-1.26 in istio/istio@release-1.26
#56722 merged
Jun 21, 2025
14 Pull requests opened by 12 people
-
add clusterTrustBundle in feature table
#56739 opened
Jun 23, 2025 -
[release-1.26] revert istio-remote service when profil=remote
#56751 opened
Jun 24, 2025 -
[release-1.25] revert istio-remote service when profil=remote
#56755 opened
Jun 24, 2025 -
support exclude namespaces for istioctl analyze
#56760 opened
Jun 24, 2025 -
[release-1.25] CNI Pod delete edge case
#56763 opened
Jun 24, 2025 -
test: adds integration test for CRL
#56766 opened
Jun 24, 2025 -
[release-1.26] CNI Pod delete edge case
#56768 opened
Jun 24, 2025 -
Fix WasmPlugin url validation
#56774 opened
Jun 25, 2025 -
integration testing fuzzing: add ffuf fuzzer
#56776 opened
Jun 25, 2025 -
Add annotation support to deployment object in istio discovery chart
#56787 opened
Jun 26, 2025 -
Inference pool Status handling and cross namespace references
#56792 opened
Jun 26, 2025 -
Automator: update proxy@master in istio/istio@master
#56813 opened
Jun 27, 2025 -
option to reorder of native sidecar containers based on proxy location
#56817 opened
Jun 27, 2025 -
add failuremode support on inferencepool
#56819 opened
Jun 27, 2025
38 Issues closed by 9 people
-
TCPRoute doesn't bind to multiple parents
#56769 closed
Jun 28, 2025 -
Update on ingress does not update AWS' Load Balancer
#55534 closed
Jun 28, 2025 -
Connection Closed Due to Policy Rejection in Ambient Mesh
#55533 closed
Jun 28, 2025 -
[release-1.23] update golang CVE packages
#55523 closed
Jun 27, 2025 -
[release-1.24] update golang CVE packages
#55522 closed
Jun 27, 2025 -
[release-1.25] update golang CVE packages
#55521 closed
Jun 27, 2025 -
Rate Limiting not working on Istio 1.20
#55507 closed
Jun 27, 2025 -
Invalid DNS SRV record returned in ambient mode and dnsCapture enabled
#55490 closed
Jun 27, 2025 -
Post istio 1.23.2 upgrade issue with istiod high memory usage
#54970 closed
Jun 27, 2025 -
Support HTTPFaultInjection via GatewayAPI
#54196 closed
Jun 27, 2025 -
custom lb policy support
#54187 closed
Jun 27, 2025 -
Migrate InferencePool Controller to KRT
#56611 closed
Jun 26, 2025 -
[gw-inference] Standardize Shadow Service labels
#56682 closed
Jun 26, 2025 -
[gw-inference] Decide if we need gateway label enablement for listener-level extProc
#56681 closed
Jun 26, 2025 -
Document limitations of wildcard domains in VirtualServices
#55475 closed
Jun 25, 2025 -
Waypoint proxy incorrectly balances connections causing single-thread limitation per client IP
#55463 closed
Jun 25, 2025 -
zzz_profile.yaml in istio Gateway flattening globals caused error
#55438 closed
Jun 25, 2025 -
Set priorities when using distribute localityLbSetting (distribute + failover mode?)
#22669 closed
Jun 25, 2025 -
Implement remote cluster reading in ambient (including service + waypoint awareness and/or merging)
#55451 closed
Jun 24, 2025 -
Pilot crash on missing HTTPRoute.BackendRef(InferencePool)
#56632 closed
Jun 24, 2025 -
Checking inject inconsistent
#51841 closed
Jun 24, 2025 -
[release-1.26] Initial support for ListenerSet
#56762 closed
Jun 24, 2025 -
Better istioctl ps output
#56005 closed
Jun 24, 2025 -
.Values.cni.enabled doesn't exist in the template
#56761 closed
Jun 24, 2025 -
Broken pipe issue on logs
#55535 closed
Jun 24, 2025 -
Upgrading to v1.26 from v1.24 breaks Ingress Gateway configuration
#56740 closed
Jun 24, 2025 -
[release-1.25] revert istio-remote service when profil=remote
#56750 closed
Jun 24, 2025 -
[release-1.25] revert istio-remote service when profil=remote
#56749 closed
Jun 24, 2025 -
Adding caCertificates to the meshConfig does not work as expected
#55442 closed
Jun 24, 2025 -
istio-proxy grow memory very rapidly and smoothly even with low QPS
#55439 closed
Jun 24, 2025 -
IP auto allocator v2: re-use IP when duplicate hostname arises
#53676 closed
Jun 24, 2025 -
v1.24 Inability to Perform Smooth Upgrade Due to Deprecation of istio-remote `Service`
#56328 closed
Jun 24, 2025 -
Feature request: PQC for mesh-internal traffic
#56330 closed
Jun 24, 2025 -
ClusterTrustBundle v1beta1 support
#56306 closed
Jun 23, 2025 -
SidecarScope no longer merging ports in Istio 1.23.4
#55428 closed
Jun 22, 2025
23 Issues opened by 21 people
-
Istio does not parse certs with negative serial numbers
#56815 opened
Jun 27, 2025 -
Remove CRL feature flag
#56814 opened
Jun 27, 2025 -
Faulty regex in VirtualService blocking Route discovery service
#56807 opened
Jun 27, 2025 -
[ambient] conditionally route traffic through the waypoint proxy
#56805 opened
Jun 27, 2025 -
Add "ignoreAuthorityCase" similar to "ignoreUriCase" in VirtualService authority match
#56801 opened
Jun 26, 2025 -
Gateway deployer runs deployment loop on each Gateway status update
#56795 opened
Jun 26, 2025 -
Clarification Needed: Current Behavior of TLS Authentication Between Ztunnel and Waypoint Proxy
#56793 opened
Jun 26, 2025 -
[DualStack] serviceEntry addresses have only the last address translated to envoy config
#56783 opened
Jun 26, 2025 -
VirtualService doesn't work with Istio Ambient when Waypoint is K8s Gatway API Gateway
#56773 opened
Jun 25, 2025 -
`WasmPlugin` requires `oci://` prefix, where documentation indicates this is optional
#56772 opened
Jun 25, 2025 -
[gw-inference] Ensure pilot can run with the Support*InferenceExtension flag and missing CRDs
#56758 opened
Jun 24, 2025 -
Does this multi-network multi-control plane service grid support failover between clusters?
#56757 opened
Jun 24, 2025 -
[release-1.25] revert istio-remote service when profil=remote
#56753 opened
Jun 24, 2025 -
[release-1.24] revert istio-remote service when profil=remote
#56752 opened
Jun 24, 2025 -
[release-1.26] fix injection template for ClusterTrustBundle
#56745 opened
Jun 23, 2025 -
Egress gateway doesn't work in multiple scenarios
#56743 opened
Jun 23, 2025 -
Error using cross namespace waypoint proxy
#56741 opened
Jun 23, 2025 -
Missing `grpc-status` trailer on responses with a size of exactly 65535
#56734 opened
Jun 23, 2025 -
[gw-inference] GIE conformance reporting
#56730 opened
Jun 23, 2025 -
Istio Ambient Mesh - error="connection failed: deadline has elapsed" traffic not routed
#56729 opened
Jun 23, 2025 -
Possible memory leak Observed in Istio Gateways (Envoy Pods)
#56728 opened
Jun 23, 2025 -
When cacerts change the webhook config updates, and the webhook server should as well.
#56723 opened
Jun 21, 2025
80 Unresolved conversations
Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.
-
Native nftables support for sidecar mode
#56487 commented on
Jun 26, 2025 • 26 new comments -
feat: allow for PDB configuration
#56630 commented on
Jun 27, 2025 • 9 new comments -
support reset log level or stack trace level separately for admin log
#56642 commented on
Jun 28, 2025 • 5 new comments -
rewrite probe only when the port needs to be intercepted
#56387 commented on
Jun 27, 2025 • 5 new comments -
Fix e2e tests when using '--istio.test.revisions' to specify multiple revisions
#56548 commented on
Jun 27, 2025 • 2 new comments -
Support mTLS for MCP
#55156 commented on
Jun 23, 2025 • 1 new comment -
ServiceScope Implementation
#56497 commented on
Jun 26, 2025 • 1 new comment -
add more policies to integration testing web fuzzing
#56698 commented on
Jun 25, 2025 • 0 new comments -
gateway api: fix rewrite
#54939 commented on
Jun 27, 2025 • 0 new comments -
Add support for `clear_route_cache` on ExtAuthZ extension
#53581 commented on
Jun 28, 2025 • 0 new comments -
Support injecting init container to pods backed by ztunnel
#49092 commented on
Jun 25, 2025 • 0 new comments -
HTTP/2 Connection Reuse Causes 404 NR in Istio with native Kubernetes Gateway API
#55732 commented on
Jun 28, 2025 • 0 new comments -
Adopt new TLSRoute semantics
#55728 commented on
Jun 28, 2025 • 0 new comments -
[release-1.25] add status for when ap is not in root ns and gw class target ref is used
#55726 commented on
Jun 28, 2025 • 0 new comments -
Remove support for Gateway API v1beta* resources graduated to v1
#55718 commented on
Jun 28, 2025 • 0 new comments -
ServiceEntry for external HTTPS proxy with multiple CIDRs not working as expected
#55716 commented on
Jun 28, 2025 • 0 new comments -
Migrate istio operator to helm inplace
#55712 commented on
Jun 28, 2025 • 0 new comments -
No way to overlay revision based MutatingWebhook
#55708 commented on
Jun 28, 2025 • 0 new comments -
Breaking change in the netlink package
#55707 commented on
Jun 28, 2025 • 0 new comments -
Istio DNS Gateway Hairpining Issues
#55701 commented on
Jun 28, 2025 • 0 new comments -
[release-1.23] Fix broken IstioCNI config for enabling repair mode
#55704 commented on
Jun 28, 2025 • 0 new comments -
Copying remote certs for external control plane setup always errors out
#55698 commented on
Jun 28, 2025 • 0 new comments -
Log file output path causes error due to read-only root filesystem in default pod security context
#55694 commented on
Jun 28, 2025 • 0 new comments -
Sidecar injector not idempotent
#55691 commented on
Jun 28, 2025 • 0 new comments -
Helm Chart Updates - istio-cni & ztunnel
#56697 commented on
Jun 27, 2025 • 0 new comments -
add additional tests for server tls settings
#56641 commented on
Jun 27, 2025 • 0 new comments -
pilot: use per revision leader for namespace controller
#56595 commented on
Jun 25, 2025 • 0 new comments -
feat: support cacert in configMaps
#56549 commented on
Jun 24, 2025 • 0 new comments -
remove unnecessary loop and condition evaluation
#56533 commented on
Jun 27, 2025 • 0 new comments -
fix: issue where selector flag of admin log cannot be empty
#56449 commented on
Jun 27, 2025 • 0 new comments -
fix: fixed ambient (l4) respect WorkloadEntry ports map for service port name
#56396 commented on
Jun 28, 2025 • 0 new comments -
nftables: Install nft binary in base and distroless images
#56363 commented on
Jun 26, 2025 • 0 new comments -
Fix maps size computation for allocation may overflow
#56337 commented on
Jun 28, 2025 • 0 new comments -
Allow RequestAuthentication policy without an issuer specified
#56158 commented on
Jun 25, 2025 • 0 new comments -
Create Istio owned CNI config
#56156 commented on
Jun 24, 2025 • 0 new comments -
istioctl ztunnel: add counters to policies
#56027 commented on
Jun 28, 2025 • 0 new comments -
Enforce FIPS-202205 compliance policy
#55949 commented on
Jun 28, 2025 • 0 new comments -
Make waypoint terminationGracePeriods configurable
#55799 commented on
Jun 28, 2025 • 0 new comments -
VirtualService merging krt collection
#55792 commented on
Jun 25, 2025 • 0 new comments -
support delete waypoint for istioctl uninstall
#55003 commented on
Jun 28, 2025 • 0 new comments -
Gateway API: hostnames in HTTPRoute make no effect
#49973 commented on
Jun 28, 2025 • 0 new comments -
Multicluster: graceful update of clusters
#49349 commented on
Jun 28, 2025 • 0 new comments -
Misconfigured meshConfig fails silently
#48991 commented on
Jun 28, 2025 • 0 new comments -
Ambient: iptables inconsistently missing for pod(s) upon node reboot
#55968 commented on
Jun 28, 2025 • 0 new comments -
Envoy stat monitor duplicated metrics - part II
#54986 commented on
Jun 27, 2025 • 0 new comments -
istio-agent drops every xDS client connection after the first, blocking grpc-go upgrade beyond 1.65.0
#53532 commented on
Jun 27, 2025 • 0 new comments -
[gw-inference] support configurable failureMode
#56622 commented on
Jun 26, 2025 • 0 new comments -
Adjustments to make waypoints support Gateway Inference extension
#56613 commented on
Jun 26, 2025 • 0 new comments -
[gw-inference] InferencePool Controller alignment
#56621 commented on
Jun 26, 2025 • 0 new comments -
serviceEntry addresses only the last address is effective,can not find other address config in envoy config
#34577 commented on
Jun 26, 2025 • 0 new comments -
istioctl manifest generate ignoring values.base.enableIstioConfigCRDs
#55511 commented on
Jun 25, 2025 • 0 new comments -
Implement RetryBudget in Gateway API
#55838 commented on
Jun 25, 2025 • 0 new comments -
Create a double-hbone client in Envoy (waypoint needs it if HTTPRoute sends cross cluster)
#55834 commented on
Jun 24, 2025 • 0 new comments -
Enabling ambient for namespace with EKS and Cilium with `bpf.masquerade=true` causes Readiness/Liveness timeouts
#52208 commented on
Jun 24, 2025 • 0 new comments -
Ambient Multi-Network Tracking Issue
#54245 commented on
Jun 24, 2025 • 0 new comments -
Traces in ambient and sidecar mode.
#56467 commented on
Jun 24, 2025 • 0 new comments -
Gateway injection failing post IstioOperator to Helm migration
#56294 commented on
Jun 23, 2025 • 0 new comments -
Support Gateway API Inference Extension
#55768 commented on
Jun 23, 2025 • 0 new comments -
【Ask for help】How to implement the failover of the same application Pod between different clusters in istio non-flat network multi-control plane environment
#56690 commented on
Jun 23, 2025 • 0 new comments -
Prepare Istio 1.27 release
#56709 commented on
Jun 22, 2025 • 0 new comments -
Sidecar regex for namespace name
#55678 commented on
Jun 28, 2025 • 0 new comments -
Retry policy for inbound requests causes sidecar memory to constantly increase
#55674 commented on
Jun 28, 2025 • 0 new comments -
[release-1.25] Bug Fix - Add Handling of `GatewayClass` to `WaypointPolicyStatusCollection`
#55673 commented on
Jun 28, 2025 • 0 new comments -
istio-cni and ztunnel can fail on EC2 nodes which handles many connections
#55668 commented on
Jun 28, 2025 • 0 new comments -
aks istion asm-1-23 with kubernetes gateway api - download file gives protocol mismatch error
#55656 commented on
Jun 28, 2025 • 0 new comments -
Support HTTP/2 Ping in DestinationRule
#55640 commented on
Jun 28, 2025 • 0 new comments -
1.25.0 - Unable to add pods to ambient mesh with `RULE_APPEND failed (Operation not supported): rule in chain ISTIO_OUTPUT`
#55636 commented on
Jun 28, 2025 • 0 new comments -
istioctl manifest -f ... -f... merging multiple files behavior has changed since 1.24.0
#55615 commented on
Jun 28, 2025 • 0 new comments -
connection outage after upgrading to AMI2023
#55605 commented on
Jun 28, 2025 • 0 new comments -
Unit tests always fail when running `make test`
#55584 commented on
Jun 28, 2025 • 0 new comments -
istio-init container binary corruption - "exec /usr/local/bin/pilot-agent: exec format error"
#55570 commented on
Jun 28, 2025 • 0 new comments -
Issue to the X-request-ID updated by Envoy
#55558 commented on
Jun 28, 2025 • 0 new comments -
Change in Retry Log Behavior in Istio 1.24 and 1.25
#55554 commented on
Jun 28, 2025 • 0 new comments -
Envoy drops packets
#55551 commented on
Jun 28, 2025 • 0 new comments -
Circuit Breaker with external service (ServiceEntry)
#55516 commented on
Jun 28, 2025 • 0 new comments -
[Ambient] Multiple mesh in the same cluster does not work
#55440 commented on
Jun 28, 2025 • 0 new comments -
Issue with Istio ServiceEntry: Same Host, Different Port, and Resolutions
#54988 commented on
Jun 28, 2025 • 0 new comments -
Different discovery selectors for Multicluster remote clusters
#54402 commented on
Jun 28, 2025 • 0 new comments -
The policy lookupNamespaces not consistent for authz and authn policy
#54168 commented on
Jun 28, 2025 • 0 new comments -
Ambient mode: h2UpgradePolicy in DestinationRule forces h2c over HBONE (waypoint to pod communication)
#54125 commented on
Jun 28, 2025 • 0 new comments