Peer authentication beta API, aka mTLS beta (#1241)

* Peer authentication beta API, aka mTLS beta

* Add missing gen file

* Update CRD cue and re-gen"

* Add port level mtls

* Udate proto.lock after rebase

* Remove port level settings for now. We might add it later

* Re-gen

* Apply comment suggestions

* Add port level mTLS settings

* Add example for inherit parent settings

* Rename invalid to unset

* Rename invalid to unset

* Address comments

* Address comments

proto.lock

@@ -45852,6 +45852,86 @@
         ]
       }
     },
+    {
+      "protopath": "security:/:v1beta1:/:peer_authentication.proto",
+      "def": {
+        "enums": [
+          {
+            "name": "MutualTLS.Mode",
+            "enum_fields": [
+              {
+                "name": "UNSET"
+              },
+              {
+                "name": "DISABLE",
+                "integer": 1
+              },
+              {
+                "name": "PERMISSIVE",
+                "integer": 2
+              },
+              {
+                "name": "STRICT",
+                "integer": 3
+              }
+            ]
+          }
+        ],
+        "messages": [
+          {
+            "name": "PeerAuthentication",
+            "fields": [
+              {
+                "id": 1,
+                "name": "selector",
+                "type": "istio.type.v1beta1.WorkloadSelector"
+              },
+              {
+                "id": 2,
+                "name": "mtls",
+                "type": "MutualTLS"
+              }
+            ],
+            "maps": [
+              {
+                "key_type": "uint32",
+                "field": {
+                  "id": 3,
+                  "name": "port_level_mtls",
+                  "type": "MutualTLS"
+                }
+              }
+            ],
+            "messages": [
+              {
+                "name": "MutualTLS",
+                "fields": [
+                  {
+                    "id": 1,
+                    "name": "mode",
+                    "type": "Mode"
+                  }
+                ]
+              }
+            ]
+          }
+        ],
+        "imports": [
+          {
+            "path": "type/v1beta1/selector.proto"
+          }
+        ],
+        "package": {
+          "name": "istio.security.v1beta1"
+        },
+        "options": [
+          {
+            "name": "go_package",
+            "value": "istio.io/api/security/v1beta1"
+          }
+        ]
+      }
+    },
     {
       "protopath": "security:/:v1beta1:/:request_authentication.proto",
       "def": {