Maintainers

Derived from CODEOWNERS at the repo root. The codeowners are GitHub teams; the named individuals at the very top of CODEOWNERS are the project-wide approvers. Working group teams own specific subtrees.

Project-wide approvers

The wildcard * line names the people who can approve changes anywhere:

• @costinm
• @linsun
• @howardjohn
• @stevenctl
• @keithmattix
• @hzxuzhonghu

Working groups (codeowner teams)

Each subtree belongs to one or more @istio/wg-*-maintainers teams. The teams correspond to the project's working groups (see https://github.com/istio/community/blob/master/WORKING-GROUPS.md).

Working group	Owns
wg-networking-maintainers	/cni/, /pilot/, /pilot/pkg/config/, /pkg/adsc/, /pkg/bootstrap/, /pkg/config/, /pkg/dns/, /pkg/envoy/, /pkg/keepalive/, /pkg/kube/, /pkg/mcp/, /pkg/queue/, /pkg/workloadapi/, /tools/istio-iptables/, architecture/networking
wg-networking-maintainers-pilot	/pilot/pkg/serviceregistry/, /pilot/pkg/model/, /pilot/pkg/networking/core, /pilot/pkg/proxy
wg-networking-maintainers-ztunnel	(cross-team with pilot) architecture/ambient
wg-security-maintainers	/security/, /pilot/pkg/security/, /pilot/pkg/networking/plugin/authn/, /pilot/pkg/networking/plugin/authz/, /pkg/spiffe/, architecture/security
wg-environments-maintainers	/cmd/istiod/, /install/, /manifests/, /operator/, /pkg/webhooks/, architecture/environments
wg-user-experience-maintainers	/istioctl/, /pkg/config/analysis/
wg-policies-and-telemetry-maintainers	/pkg/monitoring/, /pkg/tracing/, /pkg/wasm/, /samples/addons, /tests/integration/telemetry/
wg-test-and-release-maintainers	/.gitattributes, /.gitignore, /Makefile*, /bin/, /common/, /pkg/, /pkg/test/, /pkg/fuzz/, /prow/, /release/, /releasenotes/, /tests/, /tools/
wg-docs-maintainers-english	/samples/

Joint ownership

Several paths are co-owned (a PR needs approval from any one of the listed teams, but reviews from both are common):

Path	Owners
/istioctl/	wg-user-experience-maintainers + wg-networking-maintainers
/pkg/config/analysis/	wg-networking-maintainers + wg-user-experience-maintainers
/pkg/istio-agent/	wg-networking-maintainers + wg-security-maintainers
/pkg/monitoring/	wg-networking-maintainers + wg-policies-and-telemetry-maintainers
/pkg/security/	wg-security-maintainers + wg-environments-maintainers
/samples/ambient-argo	wg-user-experience-maintainers + wg-networking-maintainers
/tests/integration/istioctl/	wg-user-experience-maintainers + wg-networking-maintainers

How to find specific reviewers

For any path, run:

git ls-files --error-unmatch -- <path> >/dev/null && \
  git --no-pager log --pretty=format:'%an <%ae>' -- <path> | sort -u | head -20

This gives you the most-recent committers, which usually overlaps strongly with reviewers active for that area. The OWNERS files inside subtrees (where present) name specific approvers/reviewers below the WG level.

See also

• CODEOWNERS — the source of truth.
• istio/community — working-group definitions, charters, and meeting schedules.