1.28.7

Solo build of Istio version 1.28.7 patch release.

This release note describes what’s different between Solo builds of Istio versions 1.28.6 and 1.28.7.

General Changes

Fixed an issue where ECS-discovered workloads failed to register as WorkloadEntry resources when no domain was specified for an AWS account. A default domain is now used so workloads are always reachable within the mesh.
Fixed an issue where the ECS controller did not respect custom system namespace configurations. The controller now uses the configured namespace instead of defaulting to istio-system.
Fixed an issue where the global waypoint label value could exceed the Kubernetes 63-byte limit when the waypoint name, namespace, and domain were long, causing the label to be rejected.
Fixed traffic routing failures for global services that use named targetPort values. Requests could be sent to the wrong port when routing across clusters or to local services exposed via named ports.
Fixed cross-network traffic through a waypoint when a service that uses that waypoint is configured with a route that redirects to another service that does not use that waypoint.

No changes in this section.