Updated upstream TLS changelog entry (#6033)

Signed-off-by: Tero Saarni <tero.saarni@est.tech>
projectcontour · Dec 20, 2023 · 7dd40af · 7dd40af
1 parent a579ec3
commit 7dd40af
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 8 deletions.
diff --git a/changelogs/unreleased/5828-KauzClay-major.md b/changelogs/unreleased/5828-KauzClay-major.md
@@ -0,0 +1,9 @@
+## Upstream TLS now supports TLS 1.3 and TLS parameters can be configured
+
+The default maximum TLS version for upstream connections is now 1.3, instead of the Envoy default of 1.2.
+
+In a similar way to how Contour users can configure Min/Max TLS version and
+Cipher Suites for Envoy's listeners, users can now specify the
+same information for upstream connections. In the ContourConfiguration, this is
+available under `spec.envoy.cluster.upstreamTLS`. The equivalent config file
+parameter is `cluster.upstream-tls`.
diff --git a/changelogs/unreleased/5828-KauzClay-minor.md b/changelogs/unreleased/5828-KauzClay-minor.md