Notable Changes

Deprecation Notes

CRD Updates

No CRD changes between tags v1.2.2 and v1.2.3

Changelog

• Release v1.2.3 368fda9 (Keith Mattix II)
• bump version of go to 1.19 (#4972) 8ed34f8 (steeling)
• Upgrade cert-manager to v1.10.0 (#5230) 56679ed (Keith Mattix II)
• Add @shalier as CODEOWNERS (#5264) 7eefefe (Keith Mattix II)
• Add @shalier as a codeowner maintainer (#5261) 9559491 (Thomas Stringer)
• Move snehachhabria and draychev to emeritus status (#5260) 9f8e06a (Thomas Stringer)
• Allow all headless services, not just those backed by Statefulsets with subdomains (#5250) 25c8e53 (Keith Mattix II)

Notable Changes

Deprecation Notes

CRD Updates

No CRD changes between tags v1.2.1 and v1.2.2

Changelog

• chore(release): Bump Chart.yaml to 1.2.2 (#5215) 6815b67 (Shalier Xia)
• Fixes CVE-2022-27664 and CVE-2022-32149 d503b99 (Shalier Xia)
• [backport] cherry-pick 05e31c4 into release-v1.2 817a340 (Sanya Kochhar)
• [backport] cherry-pick 988003b into release-v1.2 b26adc1 (Sanya Kochhar)
• [backport] cherry-pick 9858c75 into release-v1.2 dd698bb (Keith Mattix II)
• [backport] cherry-pick a016262 to release-v1.2 71e6847 (steeling)

v1.2.1

Compare

Choose a tag to compare

v1.2.0

Compare

Choose a tag to compare

v1.2.0-rc.1 Pre-release

Pre-release

Compare

Choose a tag to compare

Notable Changes

• Deprecate support for TLS v1.0 and TLS v1.1 for the Envoy proxy TLSMaxProtocolVersion option
• Reduce minimum TLS version from v1.3 to v1.2 for the osm controller, verifier, and health servers
• Support robust CRD conversion patching on upgrade to ensure reconciliation is controlled by the newer OSM version

Deprecation Notes

CRD Updates

No CRD changes between tags v1.1.3 and v1.1.4

Changelog

• chore(release): bump version to v1.1.4 and update release notes (#5329) 5cc73b8 (Jackie Elliott)
• [backport] build(deps): bump github.com/docker/docker (#5315) (#5325) f978473 (Jackie Elliott)
• fix(): remove support for incompatible tls versions for envoy TLSMaxProtocolVersion (#5298) 784d680 (Whitney Griffith)
• fix(): reduce minimum tls version for osm controller, verifier, health (#5292) 0582092 (Whitney Griffith)
• Add more robust CRD conversion patching 8c6cdfd (Keith Mattix II)
• Add shalier, keithmattix, and steeling as codeowners for v1.1 (#5319) 01f7fff (Jackie Elliott)

Notable Changes

Deprecation Notes

CRD Updates

No CRD changes between tags v1.1.2 and v1.1.3

Changelog

• chore(release) bump Chart.yaml version to 1.1.3 (#5216) 5397803 (Shalier Xia)
• Fixes CVE-2022-27664 and CVE-2022-32149 40901f7 (Shalier Xia)
• [backport] cherry-pick 05e31c4 into release-v1.1 32fb680 (Sanya Kochhar)
• [backport] cherry-pick 988003b into release-v1.1 8f6cf95 (Sanya Kochhar)
• [backport] cherry-pick 9858c75 into release-v1.1 170b333 (Keith Mattix II)
• [backport] cherry-pick a016262 to release-v1.1 a54a55c (steeling)

v1.1.2

Compare

Choose a tag to compare

v1.1.1

Compare

Choose a tag to compare

Notable changes

• Circuit breaking support for traffic directed to in-mesh and external destinations

Breaking changes

The following changes are not backward compatible with the previous release.

• The osm_proxy_response_send_success_count and osm_proxy_response_send_error_count metrics are now labeled with the proxy certificate's common name and XDS type, so queries to match the previous equivalent need to sum for all values of each of those labels.

Deprecation notes

The following capabilities have been deprecated and cannot be used.

• The osm_injector_injector_sidecar_count and osm_injector_injector_rq_time metrics have been removed. The osm_admission_webhook_response_total and osm_http_response_duration metrics should be used instead.
• OSM will no longer support installation on Kubernetes version v1.19.

Notable changes

• New internal control plane event management framework to handle changes to the Kubernetes cluster and policies
• Validations to reject/ignore invalid SMI TrafficTarget resources
• Control plane memory utilization improvements
• Support for TCP server-first protocols for in-mesh traffic
• Updates to Grafana dashboards to reflect accurate metrics
• OSM control plane images are now multi-architecture, built for linux/amd64 and linux/arm64

Breaking changes

The following changes are not backward compatible with the previous release.

• Top level Helm chart keys are renamed from OpenServiceMesh to osm
• osm mesh upgrade no longer carries over values from previous releases. Use the --set flag on osm mesh upgrade to pass values as needed. The --container-registry and --osm-image-tag flags have also been removed in favor of --set.

Deprecation notes

The following capabilities have been deprecated and cannot be used.

• Kubernetes Ingress API to configure a service mesh backend to authorize ingress traffic. OSM's IngressBackend API must be used to authorize ingress traffic between an ingress gateway and service mesh backend.