Incompletely support of traffic.sidecar.istio.io/excludeOutboundIPRanges while upgrading istio from version 1.15.2 to 1.20

[navneet-we]

Is this the right place to submit this?

• This is not a security vulnerability or a crashing bug
• This is not a question about how to use Istio

Bug Description

istioctl x precheck --from-version=1.20
Info [IST0136] (Pod staging/demo-858bd586b-6kj77) Annotation "traffic.sidecar.istio.io/excludeOutboundIPRanges" is part of an alpha-phase feature and may be incompletely supported.

Version

istioctl version  
client version: 1.15.2
istiod version: 1.15.2
data plane version: 1.15.2 (204 proxies)

Additional Information

I am upgrading the istio version from 1.15.2 to 1.20.6 before that i running the command istioctl x precheck --from-version=1.20 and i am getting this
Info [IST0136] (Pod staging/buggy-app-858bd586b-6kj77) Annotation "traffic.sidecar.istio.io/excludeOutboundIPRanges" is part of an alpha-phase feature and may be incompletely supported.
i am not getting the alternate for "traffic.sidecar.istio.io/excludeOutboundIPRanges" or please let me know when traffic.sidecar.istio.io/excludeOutboundIPRanges got deprecated upto which version of istio we can use this "traffic.sidecar.istio.io/excludeOutboundIPRanges"

and the deployment file is below

apiVersion: apps/v1
kind: Deployment
metadata:
name: buggy-app
spec:
selector:
matchLabels:
app: buggy-app
strategy:
type: RollingUpdate
rollingUpdate:
maxUnavailable: 0
maxSurge: 40%
template:
metadata:
annotations:
traffic.sidecar.istio.io/excludeOutboundIPRanges: 0.0.0.0/0
labels:
app: buggy-app
spec:
affinity:

[howardjohn]

It's not changed. It was alpha and continues to be alpha

[navneet-we]

can you please explain "part of an alpha-phase feature and may be incompletely supported."

[howardjohn]

It is an alpha feature: https://istio.io/latest/docs/releases/feature-stages/

[navneet-we]

i want to know what is incompletely supported in this traffic.sidecar.istio.io/excludeOutboundIPRanges

[howardjohn]

Nothing, the message is logged for any alpha features.

[navneet-we]

thanks for the support

[navneet-we]

how can i achieve sidecar version rollout for particular workload (deployment), i have 2 version 1.15.2 and 1.20.6.
i want to run only one deployment out of 10 of dev namespace, i had provide the annotation in deployment.yaml
annotations:
istio.io/rev: 1-20-6 but still it is using istio version 1.15.2 version

navneetsingh@com-3-2022-1618 buggy-app-1 % istioctl ps
NAME CLUSTER CDS LDS EDS RDS ECDS ISTIOD VERSION
buggy-app-1-5fd757cdbf-lqdvh.dev Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-15-2-7d76d49f59-xtr2p 1.15.2
buggy-app-67466d6445-zzxps.dev Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-15-2-7d76d49f59-xtr2p 1.15.2
istio-ingressgateway-6db4578899-sjz6b.istio-system Kubernetes SYNCED SYNCED SYNCED SYNCED NOT SENT istiod-1-20-6-695fb467c8-9l42c 1.20.6
navneetsingh@com-3-2022-1618 buggy-app-1 %