1.29.4-patch1

Solo build of Istio version 1.29.4-patch1 patch release.

This release note describes what’s different between Solo builds of Istio versions 1.29.4-patch0 and 1.29.4-patch1.

General Changes

• Built against upstream Istio commit f6351e6c76fa1271f74a2eec053a2210e1ab835f. Compare.

Solo Flavor Changes

• Improved memory usage by converting remaining envoy.string filter metadata to istio.hashable_string on proxies version 1.29.2 and higher.

FIPS Flavor Changes

• Fixed a regression on Bottlerocket and AlmaLinux where the install-cni wrapper shebang rewrite produced an invalid host path, causing pod creation to fail with istio-cni-bin: No such file or directory. install-cni now accepts an optional NODE_CNI_BIN_DIR environment variable that overrides the auto-detected path. Bottlerocket and AlmaLinux users should set it to /opt/cni/bin and restart the DaemonSet:

  helm upgrade istio-cni ... --set "env.NODE_CNI_BIN_DIR=/opt/cni/bin"
  kubectl rollout restart ds/istio-cni-node -n istio-system