As of this writing we're still concluding T405808 for the 1.29 -> 1.32 bump, but in parallel we can start planning the next step, 1.32 -> 1.35.
This will conclude the multi-stage push in T380211, and it will be the last upgrade for the immediate future (until 1.38 is released in the spring of 2026, or we have an operational need for a feature or bug fix sooner).
Release notes of potential interest (1.33, 1.34, 1.35):
Config changes post-upgrade
- (1.33.0) cluster: DNS-related fields in Cluster are deprecated when using strict and logical DNS clusters. Instead, use the cluster_type extension point with typed_config of type DnsCluster.
Probably no effect
- (1.33.0) http: RFC1918 addresses are no longer considered to be internal addresses by default. This addresses a security issue for Envoy’s in multi-tenant mesh environments. Please explicit set internal_address_config to retain the prior behavior. This change can be temporarily reverted by setting runtime guard envoy.reloadable_features.explicit_internal_address_config to false.
- In previous upgrades we started explicitly setting internal_address_config, so this should be a no-op. If we have any Envoy installation without an explicit config, it's already logging warnings at startup as of 1.32.
- (1.34.0) http2: Sets runtime guard envoy.reloadable_features.http2_use_oghttp2 to true by default.
- This finally enables oghttp2 by default, after some back and forth in previous versions. Our Envoys receive no untrusted traffic so we likely won't notice any difference, but documenting in case of edge-case behavior changes.
Bare-metal hosts still upgradable:
- an-tool[1007-1008]
- aphlict[1002,2001]
- apus-fe[1003-5,2003-5] to v1.35.9
- chartmuseum[1001,2001]
- cloudweb[1003-1004]
- config-master[1001,2001]
- debmonitor[1003,2003]
- doc[1004,2003]
- idm-test1001
- idp[1005,2005]
- lists1004
- logstash[1023-1025,1030-1032,2023-2025,2030-2032]
- matomo1003
-
moss-fe[1001-1002,2001-2002](decommissioned) - ms-fe[1009-1024,2009-2024] to v1.35.9
- people[1005,2004]
- phab1004
- planet[1003,2003]
- prometheus[1005-10082,005-2008,3004,4002,5002,6002,7002]
- puppetboard[1003,2003]
- puppetserver[1001-1003,2001-2002,2004]
- restbase[1031-1045,2024-2038]
- schema[1003-1004,2003-2004]
- thanos-fe[1004-1007,2004-2007] to v1.35.9
- titan[1001-1002,2001-2002]
- vrts1003
- wcqs[1001-1003,2001-2003]
- wdqs[1011-1027,2007-2027]