Fixes
- Apply alpn protocols when resolving common ssl config to support Istio mtls in permissive mode. (#3994)
- Add
oneWayTls
boolean configuration to theSslConfig
(referenced onVirtualService
s) to allow users to configure TLS termination to use one-way TLS rather than mTLS even if the root CA is provided (e.g., by default with TLS secrets from cert-manager). (#4254)