Aspen Mesh Carrier-Grade 1.11.8-am2 release notes#

Introduction#

These release notes describe the differences between Aspen Mesh Carrier-Grade 1.11.8-am1 and 1.11.8-am2.

This release includes support for IPv4/IPv6 dual-stack networking.

Supported platforms#

This release is officially supported on these platforms and versions:

Platform

Version

Recommended Helm version

OpenShift

4.7–4.10

3.8

Security updates#

Istio 1.11.8#

(No security updates)

Aspen Mesh features#

(No security updates)

Other changes#

Istio 1.11.8#

  • Added IPv4/IPv6 dual-stack networking support, which is not available in open source Istio.

Aspen Mesh features#

  • Added IPv4/IPv6 dual-stack networking support to Packet Inspector 1.

Known issues#

  • AM-3069: OpenShift clusters using either the Multi-Primary or the Multi-Primary on different networks configuration for multicluster connectivity fail to create the remote secret with the following error:

    $ istioctl x create-remote-secret --name=cluster1

error: could not get access token to read resources from local kube-apiserver: wrong number of secrets (2) in serviceaccount istio-system/istio-reader-service-account

error: could not get access token to read resources from local kube-apiserver: wrong number of secrets (2) in serviceaccount istio-system/istio-reader-service-account

  • AM-3547: Pods with Istio sidecars get evicted when a node runs low on storage because they don’t request ephemeral storage.

  • ASM-3699: When Aspen Mesh is in IPv4/IPv6 dual-stack mode on a dual-stack cluster, applications can’t reach hosts defined in service entries.

Download#

Use either of the following methods to download the release archive file: