Dependency Bumps
- solo-io/envoy-gloo has been upgraded to v1.25.6-patch1.
- solo-io/envoy-gloo has been upgraded to 1.25.4-patch3.
New Features
- Expose Envoy's OCSP Stapling support through two new fields:
ocsp_staple
andocsp_staple_policy
. OCSP responses can be stored in TLS secrets throughglooctl create secret tls
, or by manually storing the OCSP response in a k8s tls secret under thedata
field:tls.ocsp-staple
. Thetls.ocsp-staple
secret field name is subject to change, and is currently based off of the naming used by cert-manager in this WIP PR. (#5605)
Fixes
- Fixes a bug which prevented users from using resource-based policies to invoke cross-account lambda functions. (#7965)