k8sgateway/k8sgateway v1.14.2

on GitHub

New Features

• Expose Envoy's OCSP Stapling support through two new fields: ocsp_staple and ocsp_staple_policy. OCSP responses can be stored in TLS secrets through glooctl create secret tls, or by manually storing the OCSP response in a k8s tls secret under the data field: tls.ocsp-staple. The tls.ocsp-staple secret field name is subject to change, and is currently based off of the naming used by cert-manager in this WIP PR. (#5605)

Fixes

• Adds regex validation to gloo.solo.io.RouteOptions.prefixRewrite and gloo.solo.io.RouteOptions.hostRewritePathRegex to prevent leaking invalid regex to envoy (#8091)
• Added the ability to create EncryptionSecrets via glooctl create secret. (#8094)