ABCDEFGHIJKLMNOPQRSTUVWXYZAAABACADAEAFAGAHAIAJAKAL
1
IssuesStatusOwnersUpdate 5/30/2018Update 5/25/2018Update 5/23/2018Update 5/21/2018Update 5/18/2018Update 5/16/2018Update 5/14/2018Update 5/11/2018Update 5/9/2018Update 5/7/2018Update 5/4/2018Update 5/2/2018Update 4/30/2018
2
#5723 e2e tests fails on GKE 1.10.2-gke.1Not BlockingWill be fixed in GKE 1.10.4 that is targeting the week of 6/11. Added to release notesNeed to escalate to GKE but we are going to move forward with the new 0.8 release
3
#5692 Problems with rate limiting taskDone@ostromartMandar will add release notes to mention rate limiting inaccuracies. Otherwise done.Fix is working, PR is expected to go out today. Martin will confirm the tests are passing.Problem is found and Martin is implementing it for v2 mixer client. ETA friday
4
Control plane upgrade and routing rule migrationDone@linsunLin added the doc and Costin has a PR to clean up some bugs.Doc changeETA: Control plane should be done today, Data plane ETA Thursday/Friday this week.Secure gateway issue and rate limiting issue were found in community testing yesterday.https://docs.google.com/spreadsheets/d/1_N15d2htgx-Z4f4jpxW3ZCPHLy61-FhyR00Mh7ikiR0/edit#gid=1817277800IBM team is testing out docs.Docs are up to date for Helm installation. They aren’t perfect, but they do capture the essence.
5
#5694 envoy v2 crashes during TestIngressGateway503DuringRuleChangeDone@mandarjog?Fix is being merged to 0.8.0Crash is gone after envoy upgrade; the related pilot error is fixed by https://github.com/istio/istio/pull/5807. All tests are passing now.
6
#5745 Ability to generate core files in case of crashDone@ostromartclosedHave root cause, working on fix.
7
#5525 Stops to infer Client TLSSettings based on Authentication PolicyDone@incflyPR merged, issue closed
PR is ready but fixing tests. ETA end of today.
WIP to get the authn test passing by adding new DestinationRule. ETA: PR ready to be reviewed again by the end of 5/22
8
#5678 Cannot install sidecar injector with helmDone@mandarjogDoc changeDoc change in porgress. Still need to document the injevtor is enabled by default. ETA: EOD tomorrow.Istio CTL needs to be updated but that's not a blocking issueDoc was fixed. Mandar and Andra will review and make surte.
9
#5686 Secure Gateway does not workDone@vadimeisenbergibmStill debugging. ETA a couple days.
10
#5735 Bookinfo does not workDone@costinCostin will help to triage and get more info
11
#5546 Add mixer destination policy to the default installDone@mandarjogPR is out but is failing several pilot tests. Need time to deug these failures.Mandar has a fix PR that should be merged soon.Need to resolve this ASAP between mandar, costin, and steven. Perhaps move all CRD config to top level.Fix #5568Need helm changes since pilot has no default configs ATM
12
#5628 Upgrade to istio 0.8 leaves istio-ca 0.7 runningDone@wattli, @myidptPR is out for review. Tested locally and plan to merge todayUpdated doc to manually delete istio-ca. Possibly automate it in post-install step. ETA next mondayInstall script does not remove the old istio-ca as it was renamed. Removing istio-ca is required for 0.8.0.
13
#5714 Massive failures in daily release qualification testsDone@rkpagadala, @hklaiDue to changes in istiio.yaml generation. Need to change the test to generate file using helm template.
14
#5414 Mixer report to mixer will not work with V2Done@mandarjogHave not verified non TLS. Will verify today.Mandar will go through existing tests and investigate the new test failures in Martin's PR (https://github.com/istio/istio/pull/5417).Need verification which should happen today.Mandar and Kuat have a fix and ETA is 2 days.ETA 2 days. Related to mTLS issues in #4791
15
#5648 TestTempWorkspace is failing in 0.8 release qualificationDone@rkpagadala, @seb
16
#4791 Envoy v2 + v1alpha3 Item 2 - enable ingress testsDone@ostromarthttps://github.com/istio/istio/pull/5417 uncovered other bugs in Pilot. ETA today.Martin to take ownership and make sure this is taken care of. Update: ingress is covered both directly in e2e_pilot and indirectly in e2e_bookinfo and e2e_mixer. Check status. May be fixed.PR is merged and zack is doing testing.Wildcard PR needs to be mergered, needs to go in before Envoy changes can go in.
17
#5641 istioctl appears to generate incorrect patch content for a control plane upgradeDone@sdakeData plane upgrade. No ETA yet.
18
#5638 sidecars fail in upgrade from 0.7.1 to 0.8.0 dailyDone@mandarjogMandar will work with Steven.
19
#5633 Upgrade fails on application of CRs from 0.7.1 to 0.8Done@sdakeFix is ready
20
#5596 skip listener when filters cannot be marshalledDone@rshriram, @costin
21
#5600 bookinfo nonfunctional on 0.8 branchDone@sdake, @vadimeisenbergibm
22
#5534 istio dynamic add secrets does not workDone@sbezverkFix #5541Louis will check with Costin on MC issues. This may not be release blocking.
23
#5040 Authentication Policy missing `request.auth.claims` attributeDone@theganyo, @diemtvu,Merged a partial fix https://github.com/istio/istio/pull/5550. Diem also have another fix. With both, this should no longer be blocking.Ran into datatype conversion for Map type. ETA few days, but this may not be release blcoking.
24
#5404 Prow dashboard e2e tests are failing in release-0.8 branchDone@bianpengyuanDoug have some suggestions to debugging the failures.This test may not be release blocking, envoy is not crashing only the dashboards.Peter will work on it.
25
#5331 Mixer is not accessible with v2 + mTLS enabledDone@mandarjog
26
#4791 Envoy v2 + v1alpha3 Item 3 - enable auth / RBACDone@diemtvu, @mandarjogDepends on the above. May not need additional work once the above is fixed.Same mixer mTLS issue.Mandar will help Diem to get this done. Will get more info today about the nature of the problems.Most of the tests work except 2 of them. Need to fix test set-up. They are going to debug by end of day.Need to change test setup. Make target create v2-transition yaml file in istio.yaml, but test will pick istio-auth.yaml when auth enabled.

May need help from Costin@ and need more investigation why grpc is not working.
27
#5511 TestIngressMetric and TestUpgrade fail in release qualification testsDone@bianpengyuan, @ostromartPeter will work on this.
28
#5424 Mixer Unit Tests are consistently failing in release-0.8Done@lei-tangRoot cause was due to hard restart of envoy. Need to be disabled in GKE env. Tests are passing after disabling hard restart. Problem was due to having multiple envoys in the test env. May need to add a test to do cert rotation on GKE to verify this is not a prod code / envoy problem.Early inveatigation shows it may not be due to new code, but test setup. Possibly concurrency issue. Circle may not be running the same unit tests as in Prow. May just skip in Prow.
29
#5391 Envoy init hang: EDS must respond to all requestsDone@costin, @mandarjogPR merged. Should be fixed.ETA TomorrowStill working on it. ETA next week. May need to back port to 0.7.1.
30
#5477 Strip proxy release binaryDone@qiwzhangCostin will verify.
31
#5271 Mesh expansion config missing pilot mtls portsDone@costinmFixed.PR stuck in tests should go in this week. End of week
32
#5393 istioctl get gateways/policies not workingDone@esnibleFixed.CRD is out of sync. Lin to follow up with Ed.
33
#4791 Envoy v2 + v1alpha3 Item 13 - mixer pluginDone@ostromartPR to enable new tests with v1alpha3. Root caused the 2 remaining failing tests.

Opened https://github.com/istio/istio/issues/5420 and https://github.com/istio/istio/issues/5414 for the remaining work that can be pused to 0.8.1.		Created test similar to ETE bookinfo and added V2 rules using a flag, most tests are failing, in the process of debugging. Mixer plugin is critical for all policy&telemetry functionality.

Basic mixer functionality is working. 1-2 days if bookinfo tests are working.
34
#5270 TestIngressMetric fails in both master and the 0.8 release branchDone@bianpengyuanPR is already checked in Peter and Vadim are working on this. Should be done 1-2 days.
35
#5360 Mixer E2E Tests are failing in release-0.8 branchDoneMartin, Sunnyv1 mixer tests are failing - it's a new issue, need to do troubleshooting to understand the cause. Worst case we have to turn off Mixer in branch so it doesn't block other work
36
#4664 releases: api, proxy, istio tags and branches must matchDone@qiwzhang,
@rkrishnap		Fixed by https://github.com/istio/istio/pull/5314

Both proxy and istio are using API SHA 793db0cb1a2e33012166f1d6ee5918596b8199d4		Using proxy sha for release-0.8 branch is failing tests

Wayne will fix test setup problem which prevents the SHA update. 1-2 days
37
#4937 TestUpgrade is flakyDone@yusuoh/ @bianpengyuanFixed by https://github.com/istio/istio/pull/5316Peter sent a PR to fix.
38
#5061 Fetch/cache/refresh JWT public key, construct localJwks in sidecar filter configDone@quanjielinThis PR needs to be in 0.8 otherwise end-user auth won’t work

Already included in 0.8 release branch.
39
#5339 re-add flags for consul and eurekaDone@GregHanson
40
#5720 need to be able to generate v1 istio-auth.yaml similar/compatible with 0.7.1 Not Blocking@costin, @linsunDoc update needed. Not blocking release cutting.Need documentation for 0.7.1 to 0.8.0 upgrade. Config change to use v2 image by default.
41
#5782 istio-tracing (jaeger) has memory leak and crashes under load Not Blocking@mandarjog
42
#5652 TestIngressGateway503DuringRuleChange failsNot Blocking@ostromart, @qiwzhangWayne is working on this and if it is not fixed, we will ship 0.8 without mixer in gateway
43
#5415 gateway: 0.8 httpbin sample task docs are not working with v1alpha3Not Blocking@vadimeisenbergibmPR merged, can probably be collapsed under doc updates taskPR from Vadim up for review https://github.com/istio/istio.github.io/pull/1286Vadim's PR is merged, cmluciano fixing HTTPS_Gateway tests in https://github.com/istio/istio/pull/5547. Lin will check with vadim to make sure the doc works now.vadim has a PR to fix this. cmluciano will add new tests to cover https.https is still not working. Martin and Costin will help. Update: lizan@ will do first level triage to determine whether it's a config or implementation issue.Still not sure about the root cause. Lin suggested using wildcard.A fix is available
44
#5652 TestIngressGateway503DuringRuleChange failsNot Blocking@ostromartFailure was due to envoy crash. Wayne is working on it, May disable ingress gateway reporting
45
#5525 istio-mutual support in 0.8Not Blocking@incfly
46
#5273 Intercept IPv6 portsNot Blocking@yonggangl
@wattli		Short term fix is done.PR is ready, waiting to get merged. It also has a feature toggle to turn it off.Oliver is working on the issue, Iptable NAT for IPv6 is not supported. Short term we can turn off ipv6 from ip table. Long term, we support itSecurity issue reported by customers.
47
#296 Pilot is dropping route rules for ingress in 0.7.1Not Blocking@GregHanson@ijsnellf2 part issue: Ingress route rule vs K8s ingress issue. We are leaving the behavior as is for route rule. Ed is working on the conversion tool but it's not required for 0.8. Not considered blocking anymore. Need to drop the label on GitHub.Looking into conversion/migration tool.

No test for route rules for Edge tier. ~1-2 week
48
#5097 migrate guestbook istio workshop using new route ruleNot Blocking@linsun?Lin will manually update the route rules end of day and she will document the steps needed for upgrade. This is not launch blocking for 0.8.Can be done along with #296
49
#5282 Transparent MTLSNot Blocking@PiotrSikora
@wattli		Two parts of change, Envoy side and security. Tao is working on it but won't be fixed by end of week. It's not strictly blocking 0.8 but is highly desired. Likely to come out in 0.8.1Envoy side change is pending review. Will take a few more days.

Pilot side change will happen afterward and take another 3-4 days.
50
#5255 istioctl register/unregister cmd failedNot BlockingPer conversation with Louis, this is not launch blocking
51
#5332 updateVersion.sh script not working on release-0.8Not BlockingPer conversation with Louis, this is not launch blocking
52
#5005 Gateway routing to Headless Service - no healthy upstreamNot Blocking@GregHanson
53
#5281 Per pod 'emergency off'Not BlockingNot 0.8 blocking
54
#5272 "Poison pills"Not Blocking@costinmCostin added logs for the issue he found.

Need testers to identify all the potential bugs

Not blocking for 0.8
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100