Fixes
- Make cert rotation more resilient against downtime when mTLS is enabled, by updating the certs in stages and waiting for changes to propagate. A new helm value
gateway.certGenJob.rotationDuration(default 65s) can be used the configure the duration to wait for each stage of cert rotation to complete. This value must be tuned according to the performance of the specific environment in which the jobs are run. (https://github.com/solo-io/solo-projects/issues/5252) - Unfortunately, the custom readiness probe fix causes issues in deployments via Argo, since the resouce-rollout job is deleted and causes the argo app to go out of sync, as well as missing permissions to watch jobs. Reverted this fix (#8809)