Sail Operator 1.29.0

Description of the release

Update Istio versions to 1.29.0, 1.28.4 and 1.27.7

What's Changed

• api: add ZTunnel v1 CRD version by @dgn in #1365
• Migrate to fs.FS as the sole resource loading interface by @aslakknutsen in #1561
• feat(helm): add RenderChart functions for template rendering by @aslakknutsen in #1575
• Expose "peerCaCrl" Ztunnel param added in Helm by @MaxBab in #1578
• Enable TLSv1.2 for ZTunnel when in FIPS mode by @dgn in #1547
• set preserve-unknown-fields on gatewayClasses by @skriss in #1465
• Transform structpb types back into their k8s types by @nrfox in #1493
• fix: pin helm to v3 by @dgn in #1375
• Remove Profile printcolumn from ztunnel status by @sridhargaddam in #1386
• Fix ztunnel version enumeration in update-version-list script by @sridhargaddam in #1416
• fix: Minimize wildcard use in operator ClusterRoles by @chinaran in #1477
• Fix profile column status by @MaxBab in #1553
• refactor: extract shared reconciliation logic into pkg/reconcile by @aslakknutsen in #1572

New Contributors

• @rikatz made their first contribution in #1491
• @pbajjuri20 made their first contribution in #1529
• @aslakknutsen made their first contribution in #1561

Full Changelog: 1.28.3...1.29.0

Sail Operator 1.28.3

What's Changed

• Automator: Update dependencies in istio-ecosystem/sail-operator@release-1.28 by @openshift-service-mesh-bot in #1508
• Automator: Update dependencies in istio-ecosystem/sail-operator@release-1.28 by @openshift-service-mesh-bot in #1521
• [release-1.28] Fix yq expression syntax in configuration-converter by @istio-testing in #1524
• [release-1.28] Add Istio 1.28.3 + bump operator version by @rafaelvzago in #1544

Full Changelog: 1.28.2...1.28.3

Sail Operator 1.28.2

What's Changed

• Automator: Update dependencies in istio-ecosystem/sail-operator@release-1.28 by @openshift-service-mesh-bot in #1454
• Automator: Update dependencies in istio-ecosystem/sail-operator@release-1.28 by @openshift-service-mesh-bot in #1463
• Automator: Update dependencies in istio-ecosystem/sail-operator@release-1.28 by @openshift-service-mesh-bot in #1467
• [release-1.28] set preserve-unknown-fields on gatewayClasses by @istio-testing in #1498
• [release-1.28] Add Istio 1.28.2, 1.27.5, 1.26.8 + bump operator version by @bmangoen in #1496

Full Changelog: 1.28.1...1.28.2

Sail Operator 1.28.1

What's Changed

• [release-1.28] Add support for pinning tool versions to minor releases (#1421) by @FilipB in #1430
• [release-1.28] Adding Istio 1.28.1, 1.27.4 and 1.26.7 + bump operator version by @FilipB in #1435

Full Changelog: 1.28.0...1.28.1

Sail Operator 1.28.0

Description of the release

Update Istio versions to 1.28.0

What's Changed

• [release-1.28] Update Channels, Tags and charts for release-1.28 by @bmangoen in #1349
• [release-1.28] Add Claude Code command for updating EOL Istio versions by @istio-testing in #1358
• [release-1.28] Fix make gen errors when vendor folder is present by @istio-testing in #1359
• [release-1.28] Unpining OLM version as 0.38.0 is reverting the breaking change by @istio-testing in #1360
• [release-1.28] Test External Control Plane on latest versions by @istio-testing in #1364
• [release-1.28] CI: validate only the first commit message from the PR by @istio-testing in #1362
• [release-1.28] fix: update codecov ignore pattern for tests directory by @istio-testing in #1363
• [release-1.28] Make getProxyVersion robust to changes in istioctl proxy-status format by @istio-testing in #1366
• [release-1.28] Changes on crd-ref-docs templates to add API version to the CRD by @istio-testing in #1369
• [release-1.28] Manual cherrypick: api: add ZTunnel v1 CRD version (#1365) by @bmangoen in #1384
• [release-1.28] Remove Profile printcolumn from ztunnel status by @istio-testing in #1387

New Contributors

• @t3mi made their first contribution in #1230
• @zmiklank made their first contribution in #1266
• @chinaran made their first contribution in #1288

Full Changelog: https://github.com/istio-ecosystem/sail-operator/commits/1.28.0

Sail Operator 1.27.3

What's Changed

• [release-1.27] Skip reconciliation when using sailoperator.io/ignore annotation by @istio-testing in #1276
• [release-1.27] Adding Istio 1.27.3 and 1.26.6 + bump operator version by @FilipB in #1286

Full Changelog: 1.27.2...1.27.3

Sail Operator 1.27.2

What's Changed

• [release-1.27] Add NativeNftables field in CNIGlobalConfig by @yxun in #1183
• [release-1.27] Add 1.26.1 by @dgn in #1228
• [release-1.27] fix: remove MeshConfig from ZTunnel CRD (#1236) by @dgn in #1251
• Adding Istio 1.26.5 and 1.27.2 by @FilipB in #1269

Full Changelog: 1.27.1...1.27.2

Sail Operator 1.27.1

What's Changed

Security Update

This version of the Sail Operator updates its supported Istio versions to address a critical security vulnerability. We strongly recommend all users upgrade to ensure their service mesh is protected.

Addressed CVE: ISTIO-SECURITY-2025-001

Patched Istio Versions: 1.27.1, 1.26.4, and 1.25.5

This release also includes technical fixes from the release-1.27 branch to improve stability:

• Fixed Integration Tests: Resolved an integration test failure caused by new default behaviors in PodDisruptionBudgets (PDBs). (#1181)
• Improved Installation: Disabled OpenAPI validation during chart installation to prevent potential conflicts. (#1185)
• API Transformer Fix: Corrected how the API transformer handles inline comments to ensure proper processing. (#1195)

Sail Operator 1.27.0

Description of the Release

Update Istio versions to Istio 1.27.0

What's Changed

• [release-1.27] Update Channels, Tags and charts for release-1.27 by @fjglira in #1135
• [release-1.27] Fix doc test errors by @istio-testing in #1146
• [release-1.27] Fix error in istioctl validation on doc test by @istio-testing in #1151
• [release-1.27] check global hub/tag before setting image digests from configuration by @istio-testing in #1161
• [release-1.27] Revert default MaxConcurrentReconciles to 1 by @istio-testing in #1168

New Contributors

• @dacox made their first contribution in #995
• @timonwong made their first contribution in #1108
• @Dimss made their first contribution in #1107

Sail Operator 1.26.3

What's Changed

• [release-1.26] Wrap a panic in Ginkgo node by @istio-testing in #957
• [release-1.26] Fix Panic when creating ztunnel CR by @istio-testing in #984
• [release-1.26] Skip succeeded by @istio-testing in #974
• [release-1.26] Annotate only our clusters when using kind by @istio-testing in #977
• [release-1.26] Skip cleanup if control plane tests fail by @istio-testing in #978
• [release-1.26] Update VERSIONS_YAML_FILE e2e test information by @istio-testing in #981
• [release-1.26] Cleaner improvements by @istio-testing in #982
• [release-1.26] Adding Eventually to Helm operator install by @istio-testing in #979
• Manual Cherry Picks for 1.26 by @mkolesnik in #988
• [release-1.26] Container: only use required packages (#949) by @dgn in #1000
• [release-1.26] Add base chart support (#802) by @dgn in #994
• [release-1.26] Add istioctl download while running the test on ocp clusters by @istio-testing in #1013
• [release-1.26] Use istioctl for getting proxy version by @istio-testing in #1014
• [release-1.26] Bump helm.sh/helm/v3 to v3.18.4 by @dgn in #1026
• [release-1.26] Try to uninstall releases in uninstalling status by @istio-testing in #1040
• [release-1.26] controllers: add watch for NetworkPolicy (#1034) by @dgn in #1039
• [release-1.26] cherry-pick of "add postrender logic to not set validating webhook failurePolicy (#1042)" by @skriss in #1047
• [release-1.26] api_transformer: support go.mod replace directives by @istio-testing in #1050
• [release-1.26] adding tolerations by @istio-testing in #1056
• Modify MultiControlPlane Test to run for all supported versions (#972) by @mkralik3 in #1066
• [release-1.26] Allow to use --use-image-digests flag when building a bundle by @FilipB in #1053
• [release-1.26] Fix CNI dependency logic for OpenShift platform by @istio-testing in #1068
• [release-1.26] Add cleaner to operator install test by @istio-testing in #1070
• [release-1.26] Fix values.pilot.envVarFrom field type by @istio-testing in #1077
• [release-1.26] Don't do digest pinning by default by @FilipB in #1083
• [release-1.26] Always use digests when making a release (#1082) by @FilipB in #1086
• [release-1.26] Bump to 1.26.3 by @FilipB in #1087

Full Changelog: 1.26.2...1.26.3