Aspen Mesh Platform 1.21.6-am2 release notes

Introduction

These release notes describe the differences between Aspen Mesh 1.21.6-am1 and 1.21.6-am2.

Supported container-orchestration platforms

This release is officially supported on these container-orchestration platforms and versions:

Platform	Version	Recommended Helm version
Kubernetes	1.26	3.14
Kubernetes	1.27	3.15
Kubernetes	1.28	3.16
Kubernetes	1.29, 1.32	3.17
OpenShift	4.14	3.15
OpenShift	4.16	3.17

Istio proxy (Envoy) version

1.29.12

Related Packet Inspector IDD versions

The following versions of the interface design description (IDD) specify the behaviors of Packet Inspector 1 and 2 included in this release:

Product	IDD version
Packet Inspector 1	v1.11
Packet Inspector 2	v1.7

Security updates

Istio

(No security updates)

Istio proxy (Envoy)

• CVE-2024-53270 (CVSS score 7.5, High): HTTP/1: sending overload crashes when the request is reset beforehand.

Aspen Mesh Platform features

(No security updates)

Other changes

Istio

(No changes)

Aspen Mesh Platform features

• ASM-5122: Fixed the script for verifying that your cluster meets the Aspen Mesh installation prerequisites (tools/verify-installation-prerequisites.sh in the Aspen Mesh Platform chart directory) so it uses a form of the kubectl version command that is supported by the version of OpenShift or Kubernetes.

• ASM-5135: For cert-manager, added a sample istio-csr dashboard (samples/aspenmesh/dashboards/istio-csr-dashboard.json) to use as a starting point for your own dashboard.

Known issues

(No known issues)