Skip to content

Bump bundled Istio from 1.28.1 to 1.29.2#4733

Merged
radixo merged 1 commit intotigera:release-v1.42from
radixo:cherry-pick-#4732
Apr 21, 2026
Merged

Bump bundled Istio from 1.28.1 to 1.29.2#4733
radixo merged 1 commit intotigera:release-v1.42from
radixo:cherry-pick-#4732

Conversation

@radixo
Copy link
Copy Markdown
Contributor

@radixo radixo commented Apr 21, 2026

Description

Release Note

Update bundled Istio version to 1.29.2, including CVE fixes for moby/spdystream, prometheus/prometheus, and opentelemetry-go/otel/sdk.

For PR author

  • Tests for change.
  • If changing pkg/apis/, run make gen-files
  • If changing versions, run make gen-versions

For PR reviewers

A note for code reviewers - all pull requests must have the following:

  • Milestone set according to targeted release.
  • Appropriate labels:
    • kind/bug if this is a bugfix.
    • kind/enhancement if this is a a new feature.
    • enterprise if this PR applies to Calico Enterprise only.

- Makefile ISTIO_VERSION: 1.28.1 -> 1.29.2
- Chart tgzs are gitignored; re-downloaded via `make istio_charts`
- Operator overrides none of the changed knobs; all diffs are upstream
  defaults (pilot/cni/ztunnel image tags, istio-cni
  AMBIENT_RECONCILE_POD_RULES_ON_STARTUP=true, termGracePeriod 5s->30s,
  pilot crlConfigMapName now templatable, CRD numeric min relaxations)
- Istio render + controller tests green
@radixo radixo merged commit 765ad9d into tigera:release-v1.42 Apr 21, 2026
4 checks passed
@radixo radixo deleted the cherry-pick-#4732 branch April 21, 2026 18:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants