istio.io/istio@v0.0.0-20240520182934-d79c90f27776/releasenotes/notes/peer-authn-port-level-pass-through-filter.yaml (about)

     1  apiVersion: release-notes/v2
     2  kind: feature
     3  area: security
     4  issue:
     5    - 27994
     6  
     7  releaseNotes:
     8    - |
     9      **Added** support of PeerAuthentication per-port-level configuration on pass through filter chains.
    10  
    11  upgradeNotes:
    12    - title: PeerAuthentication per-port-level configuration will now also apply to pass through filter chains.
    13      content: |
    14        Previously the PeerAuthentication per-port-level configuration is ignored if the port number is not defined in a
    15        service and the traffic will be handled by a pass through filter chain. Now the per-port-level setting will be
    16        supported even if the port number is not defined in a service, a special pass through filter chain will be added
    17        to respect the corresponidng per-port-level mTLS specification.
    18        Pleae check your PeerAuthentication to make sure you are not using the per-port-level configuration on pass through
    19        filter chains, it was not a supported feature and you should update your PeerAuthentication accordingly if you are
    20        currently relying on the unsupported behavior before the upgrade.
    21        You don't need to do anything if you are not using per-port-level PeerAuthentication on pass through filter chains.