Announcing Istio 1.24.5

Istio 1.24.5 patch release.

Apr 14, 2025

This release contains bug fixes to improve robustness. This release note describes what’s different between Istio 1.24.4 and Istio 1.24.5.

Things to know and prepare before upgrading.

Download and install this release.

Visit the documentation for this release.

Inspect the full set of source code changes.

Changes

Fixed corner cases where istio-cni might block its own upgrade. Added fallback logging (in case agent is down) to a fixed-size node-local log file. (Issue #55215)
Fixed an issue where validation webhook incorrectly reported a warning when a ServiceEntry configured workloadSelector with DNS resolution. (Issue #50164)
Fixed an issue where proxy memory goes up with gRPC streaming services.
Fixed an issue causing changes to ExternalName services to sometimes be skipped due to a cache eviction bug.
Fixed a regression where the SDS ROOTCA resource included only a single root certificate, even if the control plane was configured with both an active root and a passive root certificate that was introduced in 1.24.4. (Issue #55793)