istio/istio issues and pull requests

#57029 - manifests: add NetworkPolicy to istio-cni chart

Pull Request - State: open - Opened by dgn 17 days ago

#57028 - [release-1.26] Bump helm.sh/helm/v3 to v3.18.4

Pull Request - State: open - Opened by bmangoen 17 days ago

#57027 - [release-1.24] Bump helm.sh/helm/v3 to v3.18.4

Issue - State: open - Opened by istio-testing 17 days ago

#57025 - [release-1.26] Bump helm.sh/helm/v3 to v3.18.4

Issue - State: open - Opened by istio-testing 17 days ago

#57023 - Automator: update ztunnel@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 17 days ago
Labels: size/XS, auto-merge, release-notes-none

#57021 - Nested join refactor

Pull Request - State: open - Opened by Stevenjin8 17 days ago

#57016 - Automator: update proxy@master in istio/istio@master

Pull Request - State: open - Opened by istio-testing 18 days ago
Labels: auto-merge, release-notes-none

#57013 - Istio proxy sidecar only starting successfully in one replica of a deployment

Issue - State: closed - Opened by NHMPB 18 days ago - 2 comments
Labels: kind/need more info

#56355 - Unbalanced endpoints weight when using multi-cluster with multi-az workloads

Issue - State: open - Opened by jhonatanmorais 2 months ago
Labels: feature/Multi-cluster

#56353 - Fix mTLS gets disabled unexpectedly when adding telemetry metadata is disabled

Pull Request - State: open - Opened by yunazuno 2 months ago - 4 comments
Labels: area/networking, area/extensions and telemetry, ok-to-test, size/M

#56352 - mTLS gets disabled unexpectedly when PILOT_ENABLE_TELEMETRY_LABEL or PILOT_ENDPOINT_TELEMETRY_LABEL is set to false

Issue - State: open - Opened by yunazuno 2 months ago
Labels: area/networking, area/extensions and telemetry

#56351 - Added annotations to modify rank for match type in gateway api

Issue - State: open - Opened by useradd-temp 2 months ago

#56349 - TCPRoute: L4 traffic permanently broken when unenrolling a previously enrolled app from ambient

Issue - State: open - Opened by aaronjwood 3 months ago - 1 comment
Labels: area/networking, area/ambient

#56347 - Automator: update proxy@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56346 - [release-1.26] Support multiple err msg in TestMultiTlsGateway_InvalidSecret test

Pull Request - State: open - Opened by istio-testing 3 months ago
Labels: size/M, release-notes-none

#56345 - [release-1.25] Support multiple err msg in TestMultiTlsGateway_InvalidSecret test

Pull Request - State: open - Opened by istio-testing 3 months ago
Labels: size/M, release-notes-none

#56344 - [release-1.24] Support multiple err msg in TestMultiTlsGateway_InvalidSecret test

Pull Request - State: open - Opened by istio-testing 3 months ago
Labels: size/M, release-notes-none

#56343 - remove bypass overload manager check for static listeners

Pull Request - State: open - Opened by ramaraochavali 3 months ago
Labels: size/XL, release-notes-none

#56342 - remove unnecessary check from bootstrap

Pull Request - State: closed - Opened by ramaraochavali 3 months ago
Labels: size/XS, release-notes-none

#56341 - Automator: update go-control-plane in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/S, auto-merge, release-notes-none

#56340 - Automator: update proxy@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56338 - Maps Size computation for allocation may overflow

Issue - State: open - Opened by odaysec 3 months ago - 1 comment

#56337 - Fix maps size computation for allocation may overflow

Pull Request - State: open - Opened by odaysec 3 months ago - 6 comments
Labels: size/S, needs-ok-to-test

#56336 - Document Spire with distroless images

Issue - State: open - Opened by Jeansen 3 months ago

#56335 - support --weight parameter for istioctl x workload group create

Pull Request - State: open - Opened by my-git9 3 months ago - 1 comment
Labels: size/S

#56334 - Set the controlz port to a constant

Pull Request - State: open - Opened by my-git9 3 months ago
Labels: size/S, release-notes-none

#56332 - How to configure max_response_headers_kb for Istio Ingress Gateway

Issue - State: closed - Opened by tejash-jl 3 months ago

#56331 - tls: add PQC compliance policy

Pull Request - State: open - Opened by jewertow 3 months ago - 2 comments
Labels: area/environments, area/security, size/S

#56330 - Feature request: PQC for mesh-internal traffic

Issue - State: open - Opened by jewertow 3 months ago
Labels: kind/enhancement, area/environments, area/security, area/ambient

#56328 - v1.24 Inability to Perform Smooth Upgrade Due to Deprecation of istio-remote `Service`

Issue - State: open - Opened by nicole-lihui 3 months ago - 1 comment

#56327 - Helm: Expose `maxUnavailable` and `unhealthyPodEvictionPolicy` for Istiod PodDisruptionBudget

Issue - State: open - Opened by kevin-shelaga 3 months ago - 1 comment
Labels: area/charts

#56326 - istio-reader SA and related RBAC need not be installed by default

Issue - State: open - Opened by kfaseela 3 months ago
Labels: area/environments, feature/Multi-cluster

#56324 - Configure Access Log Format with Telemetry API without mesh config modification

Issue - State: open - Opened by kishor7007 3 months ago - 6 comments
Labels: kind/enhancement, area/extensions and telemetry

#56323 - Automator: update ztunnel@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56322 - Check for PILOT_ENABLE_IP_AUTOALLOCATE for vip-less service entries.

Pull Request - State: open - Opened by Stevenjin8 3 months ago - 2 comments
Labels: area/user experience, size/M

#56321 - Routes missing during Gateway canary upgrade

Issue - State: open - Opened by dmount-clari 3 months ago - 1 comment
Labels: area/networking, area/upgrade

#56320 - transportSocketConnectTimeout breaks slow HTTPs clients

Issue - State: open - Opened by schmidt-i 3 months ago - 2 comments
Labels: area/networking

#56317 - Automator: update istio/client-go@master dependency in istio/istio@master

Pull Request - State: open - Opened by istio-testing 3 months ago
Labels: size/S, auto-merge, release-notes-none

#56316 - Automator: update proxy@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56315 - Improve ingress address resolution in integration tests flow

Pull Request - State: open - Opened by MaxBab 3 months ago - 2 comments
Labels: area/test and release, size/M, release-notes-none

#56314 - addons: Bump addons version

Pull Request - State: closed - Opened by my-git9 3 months ago - 5 comments
Labels: size/M, release-notes-none

#56308 - feat: implements crl support for plugged-in CA

Pull Request - State: open - Opened by nilekhc 3 months ago - 3 comments
Labels: area/security, size/XXL, release-notes-none

#56300 - istiod crashes when using wildcard hostname in Gateway listener (regression from v1.26.0)

Issue - State: open - Opened by NFRBEZ 3 months ago - 6 comments
Labels: area/test and release, area/networking, area/upgrade

#56297 - Fix analysis having k8s system namespaces

Pull Request - State: open - Opened by hanxiaop 3 months ago - 3 comments
Labels: area/user experience, size/S

#56284 - Istio meshconfig precedence and merge behavior

Issue - State: open - Opened by Winbobob 3 months ago - 7 comments
Labels: area/environments, area/config, area/user experience

#56282 - Ambient Multicluster Remote Secret Reading

Pull Request - State: open - Opened by keithmattix 3 months ago - 3 comments
Labels: size/XXL, release-notes-none, area/ambient

#56268 - Session Affinity(Stickyness) not working when pod scales up or down

Issue - State: open - Opened by deepaksri0147 3 months ago - 4 comments
Labels: area/test and release

#56267 - Support replacing the default wasm v8 engine with alternative runtimes

Issue - State: open - Opened by silenceper 3 months ago - 3 comments
Labels: kind/enhancement, area/test and release, area/networking, area/extensions and telemetry

#56265 - telemetry: remove Lightstep support

Pull Request - State: open - Opened by zirain 3 months ago - 2 comments
Labels: area/extensions and telemetry, size/M

#56264 - krt: map collection

Pull Request - State: open - Opened by keithmattix 3 months ago - 1 comment
Labels: size/L, release-notes-none

#56263 - Automator: update proxy@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56261 - Automator: update proxy@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56260 - Automator: update go-control-plane in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/S, auto-merge, release-notes-none

#56259 - Automator: update istio/client-go@master dependency in istio/istio@master

Pull Request - State: open - Opened by istio-testing 3 months ago - 1 comment
Labels: size/S, auto-merge, release-notes-none

#56258 - Automator: update proxy@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56257 - Reproducible istio-proxy flaky unreadiness with default profile

Issue - State: open - Opened by erichorwath 3 months ago
Labels: area/perf and scalability

#56256 - Automator: update proxy@release-1.24 in istio/istio@release-1.24

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56255 - Automator: update proxy@release-1.25 in istio/istio@release-1.25

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56254 - [release-1.26] Fix TestAnalysisWritesStatus flaky on Openshift Cloud Platform

Pull Request - State: open - Opened by istio-testing 3 months ago
Labels: size/XS, release-notes-none

#56253 - Automator: update proxy@release-1.26 in istio/istio@release-1.26

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56252 - remove deferred stats creation flag

Pull Request - State: closed - Opened by ramaraochavali 3 months ago - 2 comments
Labels: size/M, release-notes-none

#56251 - ambient (l4) does not always respect WorkloadEntry target port

Issue - State: open - Opened by stevenctl 3 months ago - 2 comments
Labels: area/ambient

#56250 - Automator: update ztunnel@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56249 - do not merge: testing job

Pull Request - State: closed - Opened by stevenctl 3 months ago - 4 comments
Labels: size/XS

#56248 - Authorization policy is not working with cloudflare porxy

Issue - State: open - Opened by ronakthamor 3 months ago
Labels: area/networking

#56247 - [release-1.25] istioctl: fix panic when there're multiple gateways

Pull Request - State: open - Opened by istio-testing 3 months ago - 3 comments
Labels: size/S, release-notes-none

#56246 - [release-1.24] istioctl: fix panic when there're multiple gateways

Pull Request - State: open - Opened by istio-testing 3 months ago - 1 comment
Labels: size/S, release-notes-none

#56245 - [release-1.26] istioctl: fix panic when there're multiple gateways

Pull Request - State: open - Opened by istio-testing 3 months ago - 1 comment
Labels: size/S, release-notes-none

#56244 - Automator: update proxy@release-1.23 in istio/istio@release-1.23

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/XS, auto-merge, release-notes-none

#56243 - Automator: update proxy@master in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago - 1 comment
Labels: size/XS, auto-merge, release-notes-none

#56242 - Automator: update istio/client-go@master dependency in istio/istio@master

Pull Request - State: closed - Opened by istio-testing 3 months ago
Labels: size/S, auto-merge, release-notes-none

#56240 - istioctl: fix panic when there're multiple gateways

Pull Request - State: closed - Opened by zirain 3 months ago - 4 comments
Labels: area/environments, size/S, cherrypick/release-1.24, cherrypick/release-1.25, cherrypick/release-1.26

#56239 - Fix TestAnalysisWritesStatus flaky on Openshift Cloud Platform

Pull Request - State: closed - Opened by ctartici 3 months ago - 4 comments
Labels: area/test and release, ok-to-test, size/XS, release-notes-none

#56232 - Allow using ReferenceGrant for gateways and secrets

Issue - State: open - Opened by dmosesson 3 months ago
Labels: kind/enhancement, area/networking, area/security, area/ambient

#56228 - testing for ambient multi-cluster

Issue - State: open - Opened by stevenctl 3 months ago - 3 comments
Labels: kind/testing gap, area/ambient

#56226 - [release-1.25] Bump golang.org/x/net to v0.39.0

Issue - State: closed - Opened by istio-testing 3 months ago - 2 comments

#56225 - [release-1.24] Bump golang.org/x/net to v0.39.0

Issue - State: closed - Opened by istio-testing 3 months ago - 2 comments

#56224 - krt: typed indexers to avoid unnecessary conversions

Pull Request - State: closed - Opened by sschepens 3 months ago - 1 comment
Labels: area/perf and scalability, size/M, release-notes-none

#56223 - Panic when running `istioctl manifest translate` subcommand: runtime error: index out of range

Issue - State: closed - Opened by m5lapp 3 months ago - 3 comments
Labels: area/environments, area/upgrade

#56217 - helm: fix workload-socket volume in gateway injection template

Pull Request - State: open - Opened by jewertow 3 months ago - 1 comment
Labels: area/environments, size/XL

#56211 - Istio 1.25.0 gateway api http route - ResponseHeaderModifier not working as expected

Issue - State: open - Opened by ceastman-r7 3 months ago - 6 comments
Labels: area/networking, area/ambient

#56206 - Add integration test for ztunnel secure metrics

Pull Request - State: open - Opened by harsh-ps-2003 3 months ago - 2 comments
Labels: size/L, release-notes-none, area/ambient

#56179 - istio changes not reflecting for container.apparmor.security.beta.kubernetes.io migration from kubernetes 1.30 version

Issue - State: closed - Opened by sambitr 3 months ago - 6 comments

#56168 - non-global nodeselector & tolerations on waypoints

Issue - State: closed - Opened by krissell 3 months ago - 3 comments
Labels: area/ambient

#56164 - Bump golang.org/x/net to v0.39.0

Pull Request - State: closed - Opened by bmangoen 3 months ago - 15 comments
Labels: area/security, ok-to-test, size/M, release-notes-none, cherrypick/release-1.24, cherrypick/release-1.25, cherrypick/release-1.26

#56161 - Breaking change - Works in side car mode but not in ambient mode- Istio does not redirect to the same virtual service.

Issue - State: open - Opened by kirann-hegde 3 months ago - 10 comments
Labels: area/networking, kind/need more info, area/ambient

GitHub / istio/istio issues and pull requests