apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management

issue:
  - 39825

releaseNotes:
- |

By default, Istio-enabled services are unable to access services and URLs outside the cluster. Pods use <i>iptables</i> to transparently redirect all outbound traffic to the sidecar proxy, which only handles intra-cluster destinations.

See [the Egress Task](https://istio.io/docs/tasks/traffic-management/egress/) for
information on configuring Istio to contact external services.

This directory contains samples showing how to enable pods to contact a few well

  annotations:
    # annotations are set by default by istio-cni, will be ignored to avoid validation errors
    sidecar.istio.io/interceptionMode: REDIRECT
    traffic.sidecar.istio.io/excludeInboundPorts: "15020"
    traffic.sidecar.istio.io/includeInboundPorts: '*'
    traffic.sidecar.istio.io/includeOutboundIPRanges: '*'
    gateway.istio.io/controller-version: "5"
spec:
  containers:
    - name: "grafana-test"

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issue:
  - 46540

releaseNotes:
- |

      app: grpc
  template:
    metadata:
      annotations:
        inject.istio.io/templates: grpc-agent
      labels:
        app: grpc
    spec:
      containers:
      - name: traffic
        image: "fake.docker.io/google-samples/traffic-go-gke:1.0"
        readinessProbe:
          httpGet:

      app: grpc
  template:
    metadata:
      annotations:
        inject.istio.io/templates: grpc-simple
      labels:
        app: grpc
    spec:
      containers:
      - name: traffic
        image: "fake.docker.io/google-samples/traffic-go-gke:1.0"
        readinessProbe:
          httpGet:

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management
issue: [39209]
releaseNotes:
- |

// See the License for the specific language governing permissions and
// limitations under the License.

package traffic

import (
	"bytes"
	"fmt"

	"github.com/hashicorp/go-multierror"

	"istio.io/istio/pkg/test"
	"istio.io/istio/pkg/test/framework/components/echo"
)

// Result of a traffic generation operation.
type Result struct {
	TotalRequests      int
	SuccessfulRequests int
	Error              error

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: mesh-route-outbound-traffic-to-external-svc-via-egress-gw
spec:
  hosts:
  - external.{{ .externalNamespace }}.svc.cluster.local
  gateways:
  - mesh
  tcp:
  - match:
    - port: {{ .externalSvcTcpPort }}
    route:
    - destination:

  enum Scope {
    UNSPECIFIED_SCOPE = 0;
    // Prefer traffic in the same region.
    REGION = 1;
    // Prefer traffic in the same zone.
    ZONE = 2;
    // Prefer traffic in the same subzone.
    SUBZONE = 3;
    // Prefer traffic on the same node.
    NODE = 4;
    // Prefer traffic in the same cluster.
    CLUSTER = 5;
    // Prefer traffic in the same network.
    NETWORK = 6;
  }
  enum Mode {