v1.1.1-rc.1

Notable changes

• A new spec.sidecar.localProxyMode field in the MeshConfig API allows users
  to specify whether traffic from Envoy sidecars to application containers is
  redirected via 127.0.0.1 (the previous behavior and current default) or the
  Pod's IP address
• A new spec.traffic.networkInterfaceExclusionList field in the MeshConfig API
  allows users to specify names of network interfaces on Pods that should not
  have traffic proxied through Envoy sidecars
• The installed MeshConfig resource can now be updated with kubectl apply

Breaking changes

None

Deprecation notes

None

CRD Updates

No CRD changes between tags v1.1.0 and v1.1.1-rc.1

Changelog

• Release v1.1.1-rc.1 (#4720) 0171d84 (Keith Mattix II)
• Fix e2e_client_server_connectivity_test noInstall (#4708) 2cb3ee9 (Niranjan Shankar)
• pkg/injector: Enable podIP proxying via meshconfig setting (#4701) cbdcfe1 (Keith Mattix II)
• add the last applied annotation to allow using kubectl apply on the mesh config (#4673) 868c132 (steeling)
• feat(injector): add list of ignored network interfaces (#4700) 79eef29 (Jon Huhn)
• config/meshConfig: New localProxyMode field (#4686) 5a29022 (Keith Mattix II)
• Revert "config/meshConfig: New localProxyMode field (#4671)" (#4684) e9ae621 (Keith Mattix II)
• config/meshConfig: New localProxyMode field (#4671) (#4680) 134d5e2 (steeling)
• apis: add MeshRootCertificate API types (#4677) 1ca81b3 (Jackie Elliott)
• fix(doc): update release guide (#4661) e26305c (Jon Huhn)
• config/meshConfig: New localProxyMode field (#4671) 63786fd (Keith Mattix II)
• fix: upgrade vulnerable library crypto (#4676) 6089ff7 (allenlsy)