Clarify credentialName usage for separate ca secrets (#2692)

Signed-off-by: Faseela K <faseela.k@est.tech>
istio · Feb 24, 2023 · 35782d2 · 35782d2
1 parent 181d16c
commit 35782d2
Show file tree

Hide file tree

Showing 8 changed files with 13 additions and 3 deletions.
diff --git a/mesh/v1alpha1/istio.mesh.v1alpha1.gen.json b/mesh/v1alpha1/istio.mesh.v1alpha1.gen.json
diff --git a/networking/v1alpha3/destination_rule.gen.json b/networking/v1alpha3/destination_rule.gen.json
diff --git a/networking/v1alpha3/destination_rule.pb.go b/networking/v1alpha3/destination_rule.pb.go
diff --git a/networking/v1alpha3/destination_rule.pb.html b/networking/v1alpha3/destination_rule.pb.html
diff --git a/networking/v1alpha3/destination_rule.proto b/networking/v1alpha3/destination_rule.proto
@@ -1099,6 +1099,8 @@ message ClientTLSSettings {
   // following keys and values: `key: <privateKey>`,
   // `cert: <clientCert>`, `cacert: <CACertificate>`.
   // Here CACertificate is used to verify the server certificate.
+  // For mutual TLS, `cacert: <CACertificate>` can be provided in the
+  // same secret or a separate secret named `<secret>-cacert`.
   // Secret of type tls for client certificates along with
   // ca.crt key for CA certificates is also supported.
   // Only one of client certificates and CA certificate

diff --git a/networking/v1beta1/destination_rule.gen.json b/networking/v1beta1/destination_rule.gen.json
diff --git a/networking/v1beta1/destination_rule.pb.go b/networking/v1beta1/destination_rule.pb.go
diff --git a/networking/v1beta1/destination_rule.proto b/networking/v1beta1/destination_rule.proto
@@ -1048,6 +1048,8 @@ message ClientTLSSettings {
   // following keys and values: `key: <privateKey>`,
   // `cert: <clientCert>`, `cacert: <CACertificate>`.
   // Here CACertificate is used to verify the server certificate.
+  // For mutual TLS, `cacert: <CACertificate>` can be provided in the
+  // same secret or a separate secret named `<secret>-cacert`.
   // Secret of type tls for client certificates along with
   // ca.crt key for CA certificates is also supported.
   // Only one of client certificates and CA certificate