Update the binary version to 1.4.4

cmd/mesh/testdata/manifest-generate/output/flag_output_set_profile.yaml

@@ -5442,6 +5442,10 @@ data:
     # Set accessLogFile to empty string to disable access log.
     accessLogFile: ""
 
+    accessLogFormat: ""
+
+    accessLogEncoding: 'TEXT'
+
     enableEnvoyAccessLogService: false
     mixerReportServer: istio-telemetry.istio-system.svc.cluster.local:9091
     # reportBatchMaxEntries is the number of requests that are batched before telemetry data is sent to the mixer server
@@ -5452,6 +5456,16 @@ data:
 
     disablePolicyChecks: true
 
+    # Automatic protocol detection uses a set of heuristics to
+    # determine whether the connection is using TLS or not (on the
+    # server side), as well as the application protocol being used
+    # (e.g., http vs tcp). These heuristics rely on the client sending
+    # the first bits of data. For server first protocols like MySQL,
+    # MongoDB, etc., Envoy will timeout on the protocol detection after
+    # the specified period, defaulting to non mTLS plain TCP
+    # traffic. Set this field to tweak the period that Envoy will wait
+    # for the client to send the first bits of data. (MUST BE >=1ms)
+    protocolDetectionTimeout: 100ms
 
     # This is the k8s ingress service name, update if you used a different name
     ingressService: "istio-ingressgateway"

cmd/mesh/testdata/manifest-generate/output/pilot_default.yaml

@@ -5453,6 +5453,10 @@ data:
     # Set accessLogFile to empty string to disable access log.
     accessLogFile: ""
 
+    accessLogFormat: ""
+
+    accessLogEncoding: 'TEXT'
+
     enableEnvoyAccessLogService: false
     mixerReportServer: istio-telemetry.istio-control.svc.cluster.local:15004
     # reportBatchMaxEntries is the number of requests that are batched before telemetry data is sent to the mixer server
@@ -5463,6 +5467,16 @@ data:
 
     disablePolicyChecks: true
 
+    # Automatic protocol detection uses a set of heuristics to
+    # determine whether the connection is using TLS or not (on the
+    # server side), as well as the application protocol being used
+    # (e.g., http vs tcp). These heuristics rely on the client sending
+    # the first bits of data. For server first protocols like MySQL,
+    # MongoDB, etc., Envoy will timeout on the protocol detection after
+    # the specified period, defaulting to non mTLS plain TCP
+    # traffic. Set this field to tweak the period that Envoy will wait
+    # for the client to send the first bits of data. (MUST BE >=1ms)
+    protocolDetectionTimeout: 100ms
 
     # This is the k8s ingress service name, update if you used a different name
     ingressService: "istio-ingressgateway"

cmd/mesh/testdata/manifest-generate/output/pilot_k8s_settings.yaml

@@ -5453,6 +5453,10 @@ data:
     # Set accessLogFile to empty string to disable access log.
     accessLogFile: ""
 
+    accessLogFormat: ""
+
+    accessLogEncoding: 'TEXT'
+
     enableEnvoyAccessLogService: false
     mixerReportServer: istio-telemetry.istio-control.svc.cluster.local:15004
     # reportBatchMaxEntries is the number of requests that are batched before telemetry data is sent to the mixer server
@@ -5463,6 +5467,16 @@ data:
 
     disablePolicyChecks: true
 
+    # Automatic protocol detection uses a set of heuristics to
+    # determine whether the connection is using TLS or not (on the
+    # server side), as well as the application protocol being used
+    # (e.g., http vs tcp). These heuristics rely on the client sending
+    # the first bits of data. For server first protocols like MySQL,
+    # MongoDB, etc., Envoy will timeout on the protocol detection after
+    # the specified period, defaulting to non mTLS plain TCP
+    # traffic. Set this field to tweak the period that Envoy will wait
+    # for the client to send the first bits of data. (MUST BE >=1ms)
+    protocolDetectionTimeout: 100ms
 
     # This is the k8s ingress service name, update if you used a different name
     ingressService: "istio-ingressgateway"

cmd/mesh/testdata/manifest-generate/output/pilot_override_kubernetes.yaml

@@ -5452,6 +5452,10 @@ data:
     # Set accessLogFile to empty string to disable access log.
     accessLogFile: ""
 
+    accessLogFormat: ""
+
+    accessLogEncoding: 'TEXT'
+
     enableEnvoyAccessLogService: false
     mixerReportServer: istio-telemetry.istio-control.svc.cluster.local:15004
     # reportBatchMaxEntries is the number of requests that are batched before telemetry data is sent to the mixer server
@@ -5462,6 +5466,16 @@ data:
 
     disablePolicyChecks: true
 
+    # Automatic protocol detection uses a set of heuristics to
+    # determine whether the connection is using TLS or not (on the
+    # server side), as well as the application protocol being used
+    # (e.g., http vs tcp). These heuristics rely on the client sending
+    # the first bits of data. For server first protocols like MySQL,
+    # MongoDB, etc., Envoy will timeout on the protocol detection after
+    # the specified period, defaulting to non mTLS plain TCP
+    # traffic. Set this field to tweak the period that Envoy will wait
+    # for the client to send the first bits of data. (MUST BE >=1ms)
+    protocolDetectionTimeout: 100ms
 
     # This is the k8s ingress service name, update if you used a different name
     ingressService: "istio-ingressgateway"

cmd/mesh/testdata/manifest-generate/output/pilot_override_values.yaml

@@ -5453,6 +5453,10 @@ data:
     # Set accessLogFile to empty string to disable access log.
     accessLogFile: ""
 
+    accessLogFormat: ""
+
+    accessLogEncoding: 'TEXT'
+
     enableEnvoyAccessLogService: false
     mixerReportServer: istio-telemetry.istio-control.svc.cluster.local:15004
     # reportBatchMaxEntries is the number of requests that are batched before telemetry data is sent to the mixer server
@@ -5463,6 +5467,16 @@ data:
 
     disablePolicyChecks: true
 
+    # Automatic protocol detection uses a set of heuristics to
+    # determine whether the connection is using TLS or not (on the
+    # server side), as well as the application protocol being used
+    # (e.g., http vs tcp). These heuristics rely on the client sending
+    # the first bits of data. For server first protocols like MySQL,
+    # MongoDB, etc., Envoy will timeout on the protocol detection after
+    # the specified period, defaulting to non mTLS plain TCP
+    # traffic. Set this field to tweak the period that Envoy will wait
+    # for the client to send the first bits of data. (MUST BE >=1ms)
+    protocolDetectionTimeout: 100ms
 
     # This is the k8s ingress service name, update if you used a different name
     ingressService: "istio-ingressgateway"

data/versions.yaml

@@ -36,3 +36,7 @@
   operatorVersionRange: ">=1.4.3,<1.5.0"
   supportedIstioVersions: ">=1.3.3, <1.6"
   recommendedIstioVersions: 1.4.3
+- operatorVersion: 1.4.4
+  operatorVersionRange: ">=1.4.4,<1.5.0"
+  supportedIstioVersions: ">=1.3.3, <1.6"
+  recommendedIstioVersions: 1.4.4

installer.sha

@@ -1 +1 @@
-c53b06589b528f11c1642a846e13433d30f81642
+e630f3f61996eefd8a8ef5ed3adb55570d6c4a7f

version/version.go

@@ -23,7 +23,7 @@ import (
 
 const (
 	// OperatorCodeBaseVersion is the version string from the code base.
-	OperatorCodeBaseVersion = "1.4.3"
+	OperatorCodeBaseVersion = "1.4.4"
 )
 
 var (