Removed Security alpha API. Security beta API, which was introduced in Istio 1.5, is the only supported security API in Istio 1.6.
Added experimental support for request classification filters. This enables operators to configure new attributes for use in telemetry, based on request information. A primary use case for this feature is labeling of traffic by API method.
Added standard Prometheus scrape annotations to proxies and the control plane workloads, which improves the Prometheus integration experience. This removes the need for specialized configuration to discover and consume Istio metrics. More details are available in the operations guide for Prometheus.
Added the ability for mesh operators to add and remove labels used in Istio metrics, based on expressions over the set of available request and response attributes. This improves Istio’s support for customizing v2 metrics generation.
Updated default telemetry v2 configuration to avoid using host header to extract destination service name at the gateway. This prevents unbound cardinality due to an untrusted host header, and implies that destination service labels are going to be omitted for requests that hit blackhole and passthrough at the gateway.
Added automated publishing of Grafana dashboards to grafana.com as part of the Istio release process. Please see the Istio org page for more information.
Updated Grafana dashboards to adapt to the new Istiod deployment model.
Added support for Istio canary upgrades. See the Upgrade guide for more information.
Removed the legacy Helm charts. For migration from them please see the Upgrade guide.
Added the ability for users to add a custom hostname for istiod.
Changed gateway readiness port used from 15020 to 15021. If you check health on your Istio ingressgateway from your Kubernetes network load balancer you will need to update the port.
Added functionality to save installation state in a CustomResource in the cluster.
Changed the Istio installation to no longer manage the installation namespace, allowing more flexibility.
Removed the separate Citadel, Sidecar Injector, and Galley deployments. These were disabled by default in 1.5, and all functionality has moved into Istiod.
Removed the legacy istio-pilot configurations, such as Service.
Removed ports 15029-15032 from the default ingressgateway. It is recommended to expose telemetry addons by host routing instead.
Removed built in Istio configurations from the installation, including the Gateway, VirtualServices, and mTLS settings.
Added a new profile, called preview, allowing users to try out new experimental features that include WASM enabled telemetry v2.
Addedistioctl install command as a replacement for istioctl manifest apply.