v0.31.2

What's Changed

• fix: Apply section-scoped WAF policies only to the named HTTPProxy rule by @bmertens-datum in #534
• feat: Issue wildcard certificates through the certificate service by @scotwells in #526
• fix: bind VRF on per-backend EG clusters by @mattdjenkinson in #536

Full Changelog: v0.31.1...v0.31.2

Changelog

• 19d6ffd Merge branch 'main' into feat/certificate-service-consumer
• ab74874 Merge branch 'main' into fix/vrf-bind-per-backend-clusters
• 94bf822 Merge pull request #526 from datum-cloud/feat/certificate-service-consumer
• 346077b Merge pull request #534 from datum-cloud/fix/tpp-section-scoping
• 418a674 Merge pull request #536 from datum-cloud/fix/vrf-bind-per-backend-clusters
• 3d45ec3 feat: alert on failing wildcard certificates
• 0423637 feat: consume certificate service behind flag
• 3ab5879 fix: Apply section-scoped WAF policies only to the named HTTPProxy rule
• a985eee fix: bind VRF on per-backend EG clusters
• f82c180 fix: clear blocked-renewal status once renewal works
• 3c739f9 fix: isolate the certificate service from routing
• 13b36e6 fix: report blocked issuance on new hostnames
• 7ed86a4 fix: surface certificate renewals the service cannot do
• c1e8b52 refactor: limit certificate service to wildcards
• c6397c6 refactor: read issued key pairs by TLSCertificate UID