v1.8.2

Tested with Istio 1.15.2

Changes since 1.8.1

Bumped dependencies to address CVEs

• https://pkg.go.dev/vuln/GO-2023-1571
• https://pkg.go.dev/vuln/GO-2023-1495
• https://pkg.go.dev/vuln/GO-2022-1144

v1.9.0

Tested with Istio 1.16.0

Changes by Kind

Bug or Regression

• Domain mappings with long domain names do not fail anymore to get their Ingress ready (#1042, @SaschaSchwarze0)
• You can now reference secrets with a name that has a length longer than 63 characters in a domain mapping (#1043, @SaschaSchwarze0)

Other (Cleanup or Flake)

• Update istio deps, last one before 0.26.x (#1044, @k4leung4)

Dependencies

Added

• cloud.google.com/go/aiplatform: v1.24.0
• cloud.google.com/go/analytics: v0.12.0
• cloud.google.com/go/area120: v0.6.0
• cloud.google.com/go/artifactregistry: v1.7.0
• cloud.google.com/go/asset: v1.8.0
• cloud.google.com/go/assuredworkloads: v1.7.0
• cloud.google.com/go/automl: v1.6.0
• cloud.google.com/go/billing: v1.5.0
• cloud.google.com/go/binaryauthorization: v1.2.0
• cloud.google.com/go/cloudtasks: v1.6.0
• cloud.google.com/go/containeranalysis: v0.6.0
• cloud.google.com/go/datacatalog: v1.6.0
• cloud.google.com/go/dataflow: v0.7.0
• cloud.google.com/go/dataform: v0.4.0
• cloud.google.com/go/datalabeling: v0.6.0
• cloud.google.com/go/dataqna: v0.6.0
• cloud.google.com/go/datastream: v1.3.0
• cloud.google.com/go/dialogflow: v1.17.0
• cloud.google.com/go/documentai: v1.8.0
• cloud.google.com/go/domains: v0.7.0
• cloud.google.com/go/edgecontainer: v0.2.0
• cloud.google.com/go/functions: v1.7.0
• cloud.google.com/go/gaming: v1.6.0
• cloud.google.com/go/gkeconnect: v0.6.0
• cloud.google.com/go/gkehub: v0.10.0
• cloud.google.com/go/language: v1.6.0
• cloud.google.com/go/lifesciences: v0.6.0
• cloud.google.com/go/mediatranslation: v0.6.0
• cloud.google.com/go/memcache: v1.5.0
• cloud.google.com/go/metastore: v1.6.0
• cloud.google.com/go/networkconnectivity: v1.5.0
• cloud.google.com/go/networksecurity: v0.6.0
• cloud.google.com/go/notebooks: v1.3.0
• cloud.google.com/go/osconfig: v1.8.0
• cloud.google.com/go/oslogin: v1.5.0
• cloud.google.com/go/phishingprotection: v0.6.0
• cloud.google.com/go/privatecatalog: v0.6.0
• cloud.google.com/go/recaptchaenterprise/v2: v2.3.0
• cloud.google.com/go/recommendationengine: v0.6.0
• cloud.google.com/go/recommender: v1.6.0
• cloud.google.com/go/redis: v1.8.0
• cloud.google.com/go/retail: v1.9.0
• cloud.google.com/go/scheduler: v1.5.0
• cloud.google.com/go/secretmanager: v1.6.0
• cloud.google.com/go/security: v1.8.0
• cloud.google.com/go/securitycenter: v1.14.0
• cloud.google.com/go/servicedirectory: v1.5.0
• cloud.google.com/go/speech: v1.7.0
• cloud.google.com/go/talent: v1.2.0
• cloud.google.com/go/videointelligence: v1.7.0
• cloud.google.com/go/vision/v2: v2.3.0
• cloud.google.com/go/webrisk: v1.5.0
• cloud.google.com/go/workflows: v1.7.0

Changed

• cloud.google.com/go/bigquery: v1.8.0 → v1.42.0
• github.com/google/go-cmp: v0.5.8 → v0.5.9
• github.com/googleapis/gnostic: v0.4.1 → v0.5.5
• github.com/hashicorp/golang-lru: v0.5.4 → v0.6.0
• github.com/kr/pty: v1.1.5 → v1.1.1
• github.com/stretchr/objx: v0.2.0 → v0.1.1
• github.com/stretchr/testify: v1.7.0 → v1.8.0
• go.uber.org/goleak: 6911603 → v1.2.0
• go.uber.org/zap: v1.19.1 → v1.23.0
• golang.org/x/net: a158d28 → 1e63c2f
• golang.org/x/sync: 886fb93 → v0.1.0
• golang.org/x/sys: 8c9f86f → v0.3.0
• golang.org/x/term: 03fcf44 → v0.3.0
• golang.org/x/text: v0.3.7 → v0.5.0
• google.golang.org/genproto: c8bf987 → 63c7b68
• google.golang.org/grpc: v1.47.0 → v1.50.1
• google.golang.org/protobuf: v1.28.0 → v1.28.1
• istio.io/api: 3a340e4 → 09895d6
• istio.io/client-go: v1.10.3 → v1.16.1
• k8s.io/api: v0.25.2 → v0.25.5
• k8s.io/apiextensions-apiserver: v0.25.2 → v0.25.4
• k8s.io/apimachinery: v0.25.2 → v0.25.5
• k8s.io/apiserver: v0.25.2 → v0.25.4
• k8s.io/client-go: v0.25.2 → v0.25.5
• k8s.io/code-generator: v0.25.2 → v0.25.4
• k8s.io/component-base: v0.25.2 → v0.25.4
• k8s.io/gengo: 397b4ae → fad74ee
• k8s.io/klog/v2: 0990e81 → 9ae4992
• k8s.io/utils: ee6ede2 → 8e77b1f
• knative.dev/hack: 3fdc50b → c7cfcb0
• knative.dev/networking: 58f3e62 → db2bcbe
• knative.dev/pkg: 714b763 → 247510c
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.32 → v0.0.33

Removed

• github.com/Azure/go-autorest/autorest/mocks: v0.4.1
• github.com/dgrijalva/jwt-go: v3.2.0+incompatible
• github.com/docker/spdystream: 449fdfc
• github.com/emicklei/go-restful: ff4f55a
• github.com/go-openapi/spec: v0.19.3
• github.com/spf13/afero: v1.2.2
• istio.io/gogo-genproto: 4daf569

net-istio v1.6.1

Changes since v1.6.0

• Rebuilt with go1.19.4 - see CVE details https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU

Tested Istio Version: 1.14.1

Dependencies

Added

Nothing has changed.

Changed

• github.com/miekg/dns: v1.1.17 → v1.0.14
• gopkg.in/yaml.v3: 496545a → v3.0.1
• k8s.io/api: v0.23.5 → v0.23.8
• k8s.io/apiextensions-apiserver: v0.23.4 → v0.23.8
• k8s.io/apimachinery: v0.23.5 → v0.23.8
• k8s.io/apiserver: v0.23.4 → v0.23.8
• k8s.io/client-go: v0.23.5 → v0.23.8
• k8s.io/code-generator: v0.23.5 → v0.23.8
• k8s.io/component-base: v0.23.4 → v0.23.8
• knative.dev/hack: 12d3e2a → 65c463a
• knative.dev/networking: 22d1b93 → f087178
• knative.dev/pkg: 19adf79 → e60d250
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.27 → v0.0.30

Removed

• github.com/Shopify/toxiproxy: v2.1.4+incompatible
• github.com/alecthomas/jsonschema: f2c9385
• github.com/bmizerany/perks: d9a9656
• github.com/c2h5oh/datasize: 4eba002
• github.com/dgryski/go-lttb: 318fcdf
• github.com/gogo/googleapis: v1.1.0
• github.com/gonum/blas: f22b278
• github.com/gonum/diff: 500114f
• github.com/gonum/floats: c233463
• github.com/gonum/integrate: a422b5c
• github.com/gonum/internal: f884aa7
• github.com/gonum/lapack: e4cdc5a
• github.com/gonum/mathext: 8a4bf00
• github.com/gonum/matrix: c518dec
• github.com/gonum/stat: 41a0da7
• github.com/gorilla/context: v1.1.1
• github.com/lyft/protoc-gen-validate: v0.0.13
• github.com/pkg/profile: v1.2.1
• github.com/streadway/amqp: 75d898a
• github.com/streadway/quantile: b0c5887
• github.com/tsenart/go-tsz: cdeb9e1
• pgregory.net/rapid: v0.3.3

net-istio v1.8.1

Tested with Istio 1.15.2

Changes since 1.8.0

• Rebuilt with go1.19.4 - see CVE details https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU

net-istio v1.7.1

Changes since 1.7.0

• Rebuilt with go1.19.4 - see CVE details https://groups.google.com/g/golang-announce/c/L_3rmdT0BMU

Changes v1.6

• Bumped Istio manifests to v1.14.3

Dependencies

Added

Nothing has changed.

Changed

• golang.org/x/sync: 036812b → 886fb93
• k8s.io/api: v0.23.8 → v0.23.9
• k8s.io/apiextensions-apiserver: v0.23.8 → v0.23.9
• k8s.io/apimachinery: v0.23.8 → v0.23.9
• k8s.io/apiserver: v0.23.8 → v0.23.9
• k8s.io/client-go: v0.23.8 → v0.23.9
• k8s.io/code-generator: v0.23.8 → v0.23.9
• k8s.io/component-base: v0.23.8 → v0.23.9
• k8s.io/gengo: 4627b89 → 397b4ae
• k8s.io/klog/v2: 43cc75f → 0990e81
• knative.dev/hack: 65c463a → 8d1e4cc
• knative.dev/networking: f087178 → e51df7c
• knative.dev/pkg: e60d250 → 4a03844

Removed

Nothing has changed.

net-istio v1.8.0

Tested with Istio 1.15.2

net-istio v1.7.0

Most recent tested Istio Version: 1.14.3

Changes

• Bumped Istio manifests to v1.14.3

Dependencies

Added

Nothing has changed.

Changed

• golang.org/x/sync: 036812b → 886fb93
• k8s.io/api: v0.23.8 → v0.23.9
• k8s.io/apiextensions-apiserver: v0.23.8 → v0.23.9
• k8s.io/apimachinery: v0.23.8 → v0.23.9
• k8s.io/apiserver: v0.23.8 → v0.23.9
• k8s.io/client-go: v0.23.8 → v0.23.9
• k8s.io/code-generator: v0.23.8 → v0.23.9
• k8s.io/component-base: v0.23.8 → v0.23.9
• k8s.io/gengo: 4627b89 → 397b4ae
• k8s.io/klog/v2: 43cc75f → 0990e81
• knative.dev/hack: 65c463a → 8d1e4cc
• knative.dev/networking: f087178 → e51df7c
• knative.dev/pkg: e60d250 → 4a03844

Removed

Nothing has changed.

net-istio v1.6.0

Most recent tested Istio Version: 1.14.1

Dependencies

Added

Nothing has changed.

Changed

• github.com/miekg/dns: v1.1.17 → v1.0.14
• gopkg.in/yaml.v3: 496545a → v3.0.1
• k8s.io/api: v0.23.5 → v0.23.8
• k8s.io/apiextensions-apiserver: v0.23.4 → v0.23.8
• k8s.io/apimachinery: v0.23.5 → v0.23.8
• k8s.io/apiserver: v0.23.4 → v0.23.8
• k8s.io/client-go: v0.23.5 → v0.23.8
• k8s.io/code-generator: v0.23.5 → v0.23.8
• k8s.io/component-base: v0.23.4 → v0.23.8
• knative.dev/hack: 12d3e2a → 65c463a
• knative.dev/networking: 22d1b93 → f087178
• knative.dev/pkg: 19adf79 → e60d250
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.27 → v0.0.30

Removed

• github.com/Shopify/toxiproxy: v2.1.4+incompatible
• github.com/alecthomas/jsonschema: f2c9385
• github.com/bmizerany/perks: d9a9656
• github.com/c2h5oh/datasize: 4eba002
• github.com/dgryski/go-lttb: 318fcdf
• github.com/gogo/googleapis: v1.1.0
• github.com/gonum/blas: f22b278
• github.com/gonum/diff: 500114f
• github.com/gonum/floats: c233463
• github.com/gonum/integrate: a422b5c
• github.com/gonum/internal: f884aa7
• github.com/gonum/lapack: e4cdc5a
• github.com/gonum/mathext: 8a4bf00
• github.com/gonum/matrix: c518dec
• github.com/gonum/stat: 41a0da7
• github.com/gorilla/context: v1.1.1
• github.com/lyft/protoc-gen-validate: v0.0.13
• github.com/pkg/profile: v1.2.1
• github.com/streadway/amqp: 75d898a
• github.com/streadway/quantile: b0c5887
• github.com/tsenart/go-tsz: cdeb9e1
• pgregory.net/rapid: v0.3.3

net-istio v1.5.0

Most recent tested Istio Version: 1.13.4

Enhancement

• Memory leak fix for large clusters where all cluster secrets were listed in net-istio.
  Secret informer in ingress controller can be enabled to filter secrets based on the existence of a label keycertificate.networking.knative.dev.
  Users are required to add the label key for custom secrets defined in ingresses.
  For special cases users are recommended to reach out to Knative community.
  In case of AutoTLS provided by Knative net-certmanager this is done transparently.
  To enable this behavior at net-istio set env var ENABLE_SECRET_INFORMER_FILTERING_BY_CERT_UI to true.
  This will be available by default in future releases. (#920, @skonto)

Uncategorized

• local-gateway.mesh: "mesh" option was dropped. (#915, @nak3)

Dependencies

Added

Nothing has changed.

Changed

• knative.dev/hack: 6ffd841 → 12d3e2a
• knative.dev/networking: 1145ec5 → 22d1b93
• knative.dev/pkg: e325df6 → 19adf79

Removed

Nothing has changed.

Knative Net Istio release v1.4.0

Most recent tested Istio Version: 1.13.0

New Features & Changes

• serving.knative.dev/release labels, deprecated in v1.3, have been removed. Please switch over to using app.kubernetes.io/name: knative-serving and app.kuberentes.io/version: devel. (#894, @psschwei)

Dependencies

Added

• github.com/antlr/antlr4/runtime/Go/antlr: b48c857
• github.com/getkin/kin-openapi: v0.76.0
• github.com/go-logr/zapr: v1.2.0
• github.com/google/cel-go: v0.9.0
• github.com/google/cel-spec: v0.6.0
• github.com/kr/fs: v0.1.0
• github.com/pkg/sftp: v1.10.1
• sigs.k8s.io/json: c049b76

Changed

• github.com/bketelsen/crypt: 5cbc8cc → v0.0.4
• github.com/evanphx/json-patch: v4.11.0+incompatible → v4.12.0+incompatible
• github.com/golang/glog: 23def4e → v1.0.0
• github.com/json-iterator/go: v1.1.11 → v1.1.12
• github.com/magiconair/properties: v1.8.1 → v1.8.5
• github.com/mitchellh/mapstructure: v1.1.2 → v1.4.1
• github.com/modern-go/reflect2: v1.0.1 → v1.0.2
• github.com/pelletier/go-toml: v1.2.0 → v1.9.3
• github.com/prometheus/client_golang: v1.11.0 → v1.11.1
• github.com/spf13/afero: v1.2.2 → v1.6.0
• github.com/spf13/cast: v1.3.0 → v1.3.1
• github.com/spf13/cobra: v1.1.3 → v1.2.1
• github.com/spf13/jwalterweatherman: v1.0.0 → v1.1.0
• github.com/spf13/viper: v1.7.0 → v1.8.1
• gopkg.in/ini.v1: v1.51.0 → v1.62.0
• k8s.io/api: v0.22.5 → v0.23.5
• k8s.io/apiextensions-apiserver: v0.22.5 → v0.23.4
• k8s.io/apimachinery: v0.22.5 → v0.23.5
• k8s.io/apiserver: v0.22.5 → v0.23.4
• k8s.io/client-go: v0.22.5 → v0.23.5
• k8s.io/code-generator: v0.22.5 → v0.23.5
• k8s.io/component-base: v0.22.5 → v0.23.4
• k8s.io/gengo: c02415c → 4627b89
• k8s.io/klog/v2: v2.40.1 → 43cc75f
• k8s.io/kube-openapi: 2043435 → e816edb
• k8s.io/utils: bdf08cb → 3a6ce19
• knative.dev/hack: e178598 → 6ffd841
• knative.dev/networking: e8b2eb9 → 1145ec5
• knative.dev/pkg: 2fdd5f2 → e325df6
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.0.22 → v0.0.27
• sigs.k8s.io/structured-merge-diff/v4: v4.1.2 → v4.2.1

Removed

Nothing has changed.