From 4beb53dfd8a45f24027def7ac2bd4a258603cc19 Mon Sep 17 00:00:00 2001
From: doujiang24 <doujiang24@gmail.com>
Date: Fri, 26 Jul 2024 04:36:58 +0800
Subject: [PATCH] doc: add change log for custom_tls_certificate_selector.
 (#35440)

Signed-off-by: doujiang24 <doujiang24@gmail.com>
---
 changelogs/current.yaml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/changelogs/current.yaml b/changelogs/current.yaml
index 4b03077ec5c2..621d9eec6dcc 100644
--- a/changelogs/current.yaml
+++ b/changelogs/current.yaml
@@ -77,5 +77,11 @@ new_features:
     Added socket ``type`` field for specifying a socket type to apply the socket option to under :ref:`SocketOption
     <envoy_v3_api_msg_config.core.v3.SocketOption>`. If not specified, the socket option will be applied to all socket
     types.
+- area: tls
+  change: |
+    Added an extension point :ref:`custom_tls_certificate_selector
+    <envoy_v3_api_field_extensions.transport_sockets.tls.v3.CommonTlsContext.custom_tls_certificate_selector>`
+    to allow overriding TLS certificate selection behavior.
+    An extension can select certificate base on the incoming SNI, in both sync and async mode.
 
 deprecated: