For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.

Solo build of Istio version 1.30.4-patch0 patch release.

This release note describes what’s different between Solo builds of Istio versions 1.30.4 and 1.30.4-patch0.

General Changes

• Built against upstream Istio commit 0d3c3f185fe2413f39d47ae8e660bcb5148e6a0c. Compare.

• Fixed an issue where istiod repeatedly serialized the same workload when pushing workload metadata to Envoy proxies.

• Fixed istioctl analyze building Kubernetes clients directly from istio-system multicluster secrets without sanitizing the kubeconfig, which could allow a crafted secret to run an exec credential plugin (or read local files via other unsafe auth fields) on the machine running istioctl. The kubeconfig is now sanitized the same way istiod already sanitizes these secrets.

  Credit: This vulnerability was discovered and reported by Adam Korczynski.

Solo Flavor Changes

No changes in this section.

FIPS Flavor Changes

No changes in this section.