New Features
- Add API to support optional OIDC configuration override for ext-auth. OIDC Configuration is discovered at /.well-known/openid-configuration and this configuration can override those discovered values. (#3879)
- Support XDS V2/V3 APIs simultaneously from rate-limit server. (#2815)
Fixes
- In multi-proxy environments, resources that were invalid on one proxy (error or warning) but valid on another may have a status written of accepted, despite internally calculating (and logging) a warning. This is now fixed. (#3935)
- cert-manager can be used to create a Certificate (https://cert-manager.io/docs/concepts/certificate/). This is used to generate a TLS key and certificate, and they are stored in a Kubernetes secret. This can be configured to include an optional property on the secret, ca.crt, which holds a root CA certificate. If cert-manager is used to generate this Kubernetes secret, and the root CA certificate is included, we were not including it when converting to a Gloo secret, causing Gloo to crash. (#3652)
- Turn the certgen job into a no-op if the previously generated certs still exist, and are still valid. (#3790)