Security
- xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)
- Special Thanks: @al4an444
Bug Fixes
- otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)
Contributors
al4an444