Merge branch 'main' into '25-multiingress-poc'

# Conflicts:
#   CHANGELOG.md

CHANGELOG.md

@@ -2,12 +2,15 @@
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.8.4-bb.5]
-
+## [1.8.4-bb.6]
 ### Changed
 - **BREAKING** `ingressGateway` deprecated in favor of creating `ingressGateways` in a uniform manner
 - **BREAKING** `gateway` deprecated in favor of creating `gateways` in a uniform manner
 
+## [1.8.4-bb.5]
+### Fixed
+- Kube API egress allowed for all pods, not just istiod
+
 ## [1.8.4-bb.4]
 ### Added
 - Kube API egress networkpolicy

chart/templates/network-policy/egress-kube-api.yaml

@@ -2,12 +2,10 @@
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
-  name: allow-egress-api
+  name: egress-kube-api
   namespace: {{ .Release.Namespace }}
 spec:
-  podSelector:
-    matchLabels:
-      app: istiod
+  podSelector: {}
   egress:
   - to:
     - ipBlock: