Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.25.6-patch1.
- solo-io/envoy-gloo has been upgraded to 1.25.4-patch3.
New Features
- Expose Envoy's OCSP Stapling support through two new fields:
ocsp_stapleandocsp_staple_policy. OCSP responses can be stored in TLS secrets throughglooctl create secret tls, or by manually storing the OCSP response in a k8s tls secret under thedatafield:tls.ocsp-staple. Thetls.ocsp-staplesecret field name is subject to change, and is currently based off of the naming used by cert-manager in this WIP PR. (#5605)
Fixes
- Fixes a bug which prevented users from using resource-based policies to invoke cross-account lambda functions. (#7965)