Fixes
- Apply alpn protocols when resolving common ssl config to support Istio mtls in permissive mode. (#3994)
- Add
oneWayTlsboolean configuration to theSslConfig(referenced onVirtualServices) to allow users to configure TLS termination to use one-way TLS rather than mTLS even if the root CA is provided (e.g., by default with TLS secrets from cert-manager). (#4254)