Supported Releases

This page lists the status, timeline and policy for currently supported releases. Supported releases of Istio include releases that are in the active maintenance window and are patched for security and bug fixes. Subsequent patch releases on a minor release do not contain backward incompatible changes.

Support policy

We produce new builds of Istio for each commit. Around once a quarter, we build a minor release and run through several additional tests as well as release qualification. We release patch versions for issues found in minor releases.

The various types of releases represent a different product quality level and level of assistance from the Istio community. In this context, support means that the community will produce patch releases for critical issues and offer technical assistance. Separately, 3rd parties and partners may offer longer-term support solutions.

TypeSupport LevelQuality and Recommended Use
Development BuildNo supportDangerous, may not be fully reliable. Useful to experiment with.
Minor ReleaseSupport provided until 6 weeks after the N+2 minor release (ex. 1.11 supported until 6 weeks after 1.13.0 is released)
PatchSame as the corresponding Minor releaseUsers are encouraged to adopt patch releases as soon as they are available for a given release.
Security PatchSame as a Patch, however, it will not contain any additional code other than the security fix from the previous patchGiven the nature of security fixes, users are strongly encouraged to adopt security patches after release.

You can find available releases on the releases page, and if you’re the adventurous type, you can learn about our development builds on the development builds wiki. You can find high-level releases notes for each minor and patch release here.

Naming scheme

Our naming scheme is as follows:

  1. <major>.<minor>.<patch>

where <minor> is increased for each release, and <patch> counts the number of patches for the current <minor> release. A patch is usually a small change relative to the <minor> release.

Control Plane/Data Plane Skew

The Istio control plane can be one version ahead of the data plane. However, the data plane cannot be ahead of control plane. We recommend using revisions so that there is no skew at all.

As of now, data plane to data plane is compatible across all versions; however, this may change in the future.

Support status of Istio releases

VersionCurrently SupportedRelease DateEnd of LifeSupported Kubernetes VersionsTested, but not supported
masterNo, development only
1.17YesFebruary 14, 2023~Sept 2023 (Expected)1.23, 1.24, 1.25, 1.261.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22
1.16YesNovember 15, 2022~June 2023 (Expected)1.22, 1.23, 1.24, 1.251.16, 1.17, 1.18, 1.19, 1.20, 1.21
1.15YesAugust 31, 2022~March 2023 (Expected)1.22, 1.23, 1.24, 1.251.16, 1.17, 1.18, 1.19, 1.20, 1.21
1.14NoMay 24, 2022Dec 27, 20221.21, 1.22, 1.23, 1.241.16, 1.17, 1.18, 1.19, 1.20
1.13NoFebruary 11, 2022Oct 12, 20221.20, 1.21, 1.22, 1.231.16, 1.17, 1.18, 1.19
1.12NoNovember 18, 2021Jul 12, 20221.19, 1.20, 1.21, 1.221.16, 1.17, 1.18
1.11NoAugust 12, 2021Mar 25, 20221.18, 1.19, 1.20, 1.21, 1.221.16, 1.17
1.10NoMay 18, 2021Jan 7, 20221.18, 1.19, 1.20, 1.211.16, 1.17, 1.22
1.9NoFebruary 9, 2021Oct 8, 20211.17, 1.18, 1.19, 1.201.15, 1.16
1.8NoNovember 10, 2020May 12, 20211.16, 1.17, 1.18, 1.191.15
1.7NoAugust 21, 2020Feb 25, 20211.16, 1.17, 1.181.15
1.6 and earlierNo

Kubernetes 1.22 removed some deprecated APIs and as a result versions of Istio prior to 1.10.0 will no longer work. If you are upgrading your Kubernetes version, make sure that your Istio version is still supported.

Supported releases without known Common Vulnerabilities and Exposures (CVEs)

Istio does not guarantee that minor releases that fall outside the support window have all known CVEs patched. Please keep up-to-date and use a supported version.

Minor ReleasesPatched versions with no known CVEs
1.16.x1.16.0+
1.15.x1.15.3+
1.14.x1.14.5 - End of life. A new CVE will NOT be patched.
1.13.x1.13.9 - End of life. A new CVE will NOT be patched.
1.12 and earlierNone, all versions have known vulnerabilities.

Supported Envoy Versions

Istio’s data plane is based on Envoy.

The relationship between the two project’s versions:

Istio versionEnvoy version
1.17.x1.25.x
1.16.x1.24.x
1.15.x1.23.x

In general, Istio releases tend to map one to one with Envoy releases. You can find the precise Envoy commit used by Istio in istio/proxy.