Supported Solo Istio versions
View supported Solo Istio versions and their release cycle.
Within each Gloo Mesh Core version, different open source project versions are supported, including Solo Istio
n-4 version support.
The following versions of Gloo Mesh Core are supported with the compatible open source project versions of Istio and Kubernetes. Later versions of the open source projects that are released after Gloo Mesh Core might also work, but are not tested as part of the Gloo Mesh Core release.
|Gloo Mesh Core||Release date||Supported Solo Istio versions and related Kubernetes versions tested by Solo|
Keep in mind that Gloo Mesh Core offers
n-4 security patching support only with Solo Istio versions, not community Istio versions. Solo Istio versions support the same patch versions as community Istio. You can review community Istio patch versions in the Istio release documentation. You must run the latest Gloo Mesh Core patch version to get the backported Istio support.
Supported Istio versions by Kubernetes or OpenShift version
The supported version of Istio, and Kubernetes or OpenShift are dependent on each other. For example, if you plan to use Gloo Mesh Core with Istio 1.19, you must make sure that you use a Kubernetes or OpenShift version that is compatible with Istio 1.19. The same is true if you decided on a specific Kubernetes or OpenShift version, and you must find an Istio version that is compatible.
Known Istio issues
- For FIPS-compliant builds of Istio 1.17.2 and 1.16.4, you must use the
-patch1versions of the latest Istio builds published by Solo, such as
1.17.2-patch1-solo-fipsfor Solo Istio version 1.17. These patch versions fix a FIPS-related issue introduced in the upstream Envoy code. In 1.17.3 and later, FIPS compliance is available in the
-fipstags of regular Solo Istio builds, such as
Download a specific image
You can download a particular image of Solo Istio, such as for the following use cases.
- To download and transfer these images if your environment does not have public network access or cannot pull public images, for an air-gapped installation.
- To run an older Istio version that the community no longer supports while still receiving security patches.
- To use a custom build that aligns with compliance standards such as Federal Information Processing Standards (FIPS).
To download Solo Istio images, you must be a registered user and log in to the Solo Support Center.
- Open the Istio images built by Solo.io support article. When prompted, log in to the Support Center with your Solo account credentials.
- Find the repo key for the Istio version that you want to use in the support article, such as the repo key for
- Save the repo key that your account representative gave you as an environment variable.
- Decide on the specific tag of Istio image, such as the
solo-fips-distroless, that you want for your environment.
- Save the Istio version, including any specific tags, as an environment variable. The following example is for the latest patch version of the Solo Istio FIPS image.
- Pull the Istio images that you want to use with the repo key.
docker pull $REPO/pilot:$ISTIO_IMAGE docker pull $REPO/proxyv2:$ISTIO_IMAGE docker pull $REPO/operator:$ISTIO_IMAGE
- Install Istio with these images.
- To use Gloo Mesh Core to deploy and manage the lifecycle of your Istio service meshes across clusters, see Deploy Gloo-managed service meshes. In the example files that you donwload in this guide, make sure to replace any images with the Solo Istio images that you want to use.
- To manually install Istio, you can use an installation method such as using
istioctl, the Istio Operator, or Helm. When you install Istio, make sure to replace any images with the Solo Istio images that you want to use. For more information, see the Istio documentation.
- After installing Istio, you can verify that the version is compatible with your Kubernetes environment by running
istioctl x precheck.
istioctl x precheck ✔ No issues found when checking the cluster. Istio is safe to install or upgrade! To get started, check out https://istio.io/latest/docs/setup/getting-started/