Peer authentication beta API, aka mTLS beta (#1241) (#1273)

* Peer authentication beta API, aka mTLS beta * Add missing gen file * Update CRD cue and re-gen" * Add port level mtls * Udate proto.lock after rebase * Remove port level settings for now. We might add it later * Re-gen * Apply comment suggestions * Add port level mTLS settings * Add example for inherit parent settings * Rename invalid to unset * Rename invalid to unset * Address comments * Address comments
istio · Feb 6, 2020 · a8a0065 · a8a0065
1 parent c39984c
commit a8a0065
Show file tree

Hide file tree

Showing 9 changed files with 1,759 additions and 0 deletions.
diff --git a/kubernetes/customresourcedefinitions.gen.yaml b/kubernetes/customresourcedefinitions.gen.yaml
diff --git a/proto.lock b/proto.lock
@@ -45852,6 +45852,86 @@
         ]
       }
     },
+    {
+      "protopath": "security:/:v1beta1:/:peer_authentication.proto",
+      "def": {
+        "enums": [
+          {
+            "name": "MutualTLS.Mode",
+            "enum_fields": [
+              {
+                "name": "UNSET"
+              },
+              {
+                "name": "DISABLE",
+                "integer": 1
+              },
+              {
+                "name": "PERMISSIVE",
+                "integer": 2
+              },
+              {
+                "name": "STRICT",
+                "integer": 3
+              }
+            ]
+          }
+        ],
+        "messages": [
+          {
+            "name": "PeerAuthentication",
+            "fields": [
+              {
+                "id": 1,
+                "name": "selector",
+                "type": "istio.type.v1beta1.WorkloadSelector"
+              },
+              {
+                "id": 2,
+                "name": "mtls",
+                "type": "MutualTLS"
+              }
+            ],
+            "maps": [
+              {
+                "key_type": "uint32",
+                "field": {
+                  "id": 3,
+                  "name": "port_level_mtls",
+                  "type": "MutualTLS"
+                }
+              }
+            ],
+            "messages": [
+              {
+                "name": "MutualTLS",
+                "fields": [
+                  {
+                    "id": 1,
+                    "name": "mode",
+                    "type": "Mode"
+                  }
+                ]
+              }
+            ]
+          }
+        ],
+        "imports": [
+          {
+            "path": "type/v1beta1/selector.proto"
+          }
+        ],
+        "package": {
+          "name": "istio.security.v1beta1"
+        },
+        "options": [
+          {
+            "name": "go_package",
+            "value": "istio.io/api/security/v1beta1"
+          }
+        ]
+      }
+    },
     {
       "protopath": "security:/:v1beta1:/:request_authentication.proto",
       "def": {

diff --git a/python/istio_api/security/v1beta1/peer_authentication_pb2.py b/python/istio_api/security/v1beta1/peer_authentication_pb2.py