Istio 1.30.3 is a patch release focused on bug fixes and robustness improvements over 1.30.2. Key fixes include: a regression where metadata-only VirtualService changes (e.g. from GitOps tools like Argo CD) triggered unnecessary XDS pushes to all proxies, causing high control plane CPU usage; a deadlock in the ambient CNI node agent during concurrent pod deletion and ztunnel reconnection; a bug preventing istiod from picking up updated remote cluster secrets without a restart; a WasmPlugin crash-loop on waypoint proxies when targeting a Service via cross-namespace targetRefs; and cross-network traffic being blocked by a spurious deny-all RBAC filter. Additional improvements include scoped XDS pushes in ambient mode for better istiod scalability and support for a custom taint name in the pilot node untaint controller.
