Istio 1.8 has been released. This will be the last version released this year. In the future, it will continue to improve availability, security and reliability, and focus on multi-cluster Mesh and VM workloads.
Update highlights:
Multi-cluster
The new version has written a new installation guide for cross-cluster Mesh installation , which reduces the difficulty of installation. The main options are determined by whether the cluster is on the same network and whether multiple control planes need to be maintained.
It is more convenient to add VMs to Mesh
The last version 1.7 improved the security of VM Mesh endpoints, and the focus of version 1.8 was on usability. This version simplifies the installation process and supports use istioctlfor installation. In addition, the new intelligent DNS proxy function can resolve network services from the VM without the need to point it to the cluster DNS server in an insecure way.
Safety
The certificate is now sent to the gateway via Istiod instead of being read directly from Kubernetes. This reduces the common exposure of public gateway permissions, thereby improving the "defense in depth" posture. On the other hand, this also provides a new direction for improving performance, reducing memory usage, and expanding certificates.
Ease of use
A new version is introduced istioctl bug-report. This report will collect debugging information and cluster status to help developers and supplier support teams better understand the problem.
istioctl analyzeYou can display the location where the object is not correctly verified and cluster errors. If an error occurs, it will immediately return the line number where the error is located.