Istio 1.30 Transforms Service Mesh for the AI Era While Addressing Four Critical Vulnerabilities

Istio 1.30 converges three flagship AI-era features—Agentgateway, Ambient Multicluster, and TrafficExtension API—marking the ecosystem's strategic pivot toward AI workload orchestration. The release's true significance lies in security: four CVEs are patched simultaneously, including JWKS RSA key leaks that enable JWT forgery and XDS debug endpoints exposed without authentication, directly impacting production sidecars and gateways. Operations teams should treat this as a critical security major, not a routine update, with careful attention to three breaking changes in debug authentication, CNI permissions, and sidecar selection logic.