Aspen Mesh Carrier-Grade 1.11.5-am2 release notes#

Introduction#

These release notes describe the differences between Aspen Mesh Carrier-Grade 1.11.5-am1 and 1.11.5-am2.

Supported platforms#

This release is officially supported on these platforms and versions:

Platform

Version

Recommended Helm version

OpenShift

4.7

3.6

Security updates#

(No security updates)

Other changes#

Aspen Mesh features#

  • AM-3785: Added additional debug-logging capability to Packet Inspector 1. Proxy debug logging must be enabled when performing a clean installation or an upgrade by setting global.proxy.logLevel to debug. Enabling proxy debug logging may have an impact on performance.

Known issues#

  • AM-3069: OpenShift clusters using either the Multi-Primary or the Multi-Primary on different networks configuration for multicluster connectivity fail to create the remote secret with the following error:

    $ istioctl x create-remote-secret --name=cluster1

error: could not get access token to read resources from local kube-apiserver: wrong number of secrets (2) in serviceaccount istio-system/istio-reader-service-account

error: could not get access token to read resources from local kube-apiserver: wrong number of secrets (2) in serviceaccount istio-system/istio-reader-service-account

  • AM-3547: Pods with Istio sidecars get evicted when a node runs low on storage because they don’t request ephemeral storage.

Instructions#

Use these instructions, with the exceptions noted below:

Exceptions#

  • To take advantage of the additional debug-logging capability in Packet Inspector 1, do one of the following:

    • Before you perform the clean installation or upgrade, set global.proxy.logLevel to debug in your Aspen Mesh override values file.

    • As part of the clean installation or upgrade, add the following parameter to the helm install istiod or helm upgrade istiod command:

      --set global.proxy.logLevel=debug

Download#

Use either of the following methods to download the release archive file: