Istio 1.2 arrives with SNI at ingress, distributed tracing, and service tracing becoming stable

The Istio team is back with a prompt release of Istio 1.2.

The previous major release, Istio 1.1, took quite some time to go out due to some heavily manual work on testing and infrastructure.

For that reason, 1.2 focuses on improving the stability of the features introduced in Istio 1.1 and the past several 1.1.x releases, and improving general product health.

One of the most interesting highlights in this release is the graduation of SNI at ingress, distributed tracing, and service tracing from Beta to Stable.

Let’s have a look.

The updates

Istio 1.2 brings a lot of fixes and features from the Istio community.

Here are some highlights.

General

• Added traffic.sidecar.istio.io/includeInboundPorts annotation to eliminate the need for service owner to declare containerPort in the deployment yaml file. This will become the default in a future release.
• Added IPv6 experimental support for Kubernetes clusters.

Traffic management

• Added ability to configure the DNS refresh rate for sidecar Envoys, to reduce the load on the DNS servers.
• Graduated Sidecar API from Alpha to Alpha API and Beta runtime.
• Added support for setting HTTP idle timeouts to upstream services.

Security

• Added Kubernetes health check prober rewrite per deployment via sidecar.istio.io/rewriteAppHTTPProbers: "true" in the PodSpec annotation.
• Added support for configuring the secret paths for Istio mutual TLS certificates. Refer here for more details.
• Added support for PKCS 8 private keys for workloads, enabled by the flag pkcs8-keys on Citadel.
• Graduated SNI with multiple certificates support at ingress gateway from Alpha to Stable.
• Graduated certification management on Ingress Gateway from Alpha to Beta.

Telemetry

• Graduated distributed tracing from Beta to Stable.
• Changed Prometheus generated traffic is excluded from metrics.

SEE ALSO: Making microservices micro with Istio and Kubernetes

istioctl and kubectl

• Graduated istioctl verify-install out of experimental.
• Improved istioctl verify-install to validate if a given Kubernetes environment meets Istio’s prerequisites.
• Added auto-completion support to istioctl.
• Added istioctl experimental dashboard to allow users to easily open the web UI of any Istio addons.
• Added istioctl x alias to conveniently run istioctl experimental command.
• Improved istioctl version to report both Istio control plane and istioctl version info by default.
• Improved istioctl validate to validate Mixer configuration and supports deep validation with referential integrity.

Check out the official release notes for the detailed list of all new features and improvements.

The post Istio 1.2 arrives with SNI at ingress, distributed tracing, and service tracing becoming stable appeared first on JAXenter.