[release-1.20] update expected filenames for tls terminating key/secr…

…et (#2993) * update expected filenames for tls terminating key/secret * add both supported key names * regenerate protos --------- Co-authored-by: rob salmond <[email protected]>
istio · Nov 16, 2023 · 484734c · 484734c
1 parent e706220
commit 484734c
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 5 deletions.
diff --git a/networking/v1alpha3/gateway.pb.go b/networking/v1alpha3/gateway.pb.go
diff --git a/networking/v1alpha3/gateway.pb.html b/networking/v1alpha3/gateway.pb.html
diff --git a/networking/v1alpha3/gateway.proto b/networking/v1alpha3/gateway.proto
@@ -684,7 +684,8 @@ message ServerTLSSettings {
   // For gateways running on Kubernetes, the name of the secret that
   // holds the TLS certs including the CA certificates. Applicable
   // only on Kubernetes. An Opaque secret should contain the following
-  // keys and values: `key: <privateKey>` and `cert: <serverCert>`.
+  // keys and values: `tls.key: <privateKey>` and `tls.crt: <serverCert>` or
+  // `key: <privateKey>` and `cert: <serverCert>`.
   // For mutual TLS, `cacert: <CACertificate>` and `crl: <CertificateRevocationList>`
   // can be provided in the same secret or a separate secret named `<secret>-cacert`.
   // A TLS secret for server certificates with an additional `tls.ocsp-staple` key

diff --git a/networking/v1beta1/gateway.pb.go b/networking/v1beta1/gateway.pb.go
diff --git a/networking/v1beta1/gateway.proto b/networking/v1beta1/gateway.proto
@@ -684,7 +684,8 @@ message ServerTLSSettings {
   // For gateways running on Kubernetes, the name of the secret that
   // holds the TLS certs including the CA certificates. Applicable
   // only on Kubernetes. An Opaque secret should contain the following
-  // keys and values: `key: <privateKey>` and `cert: <serverCert>`.
+  // keys and values: `tls.key: <privateKey>` and `tls.crt: <serverCert>` or
+  // `key: <privateKey>` and `cert: <serverCert>`.
   // For mutual TLS, `cacert: <CACertificate>` and `crl: <CertificateRevocationList>`
   // can be provided in the same secret or a separate secret named `<secret>-cacert`.
   // A TLS secret for server certificates with an additional `tls.ocsp-staple` key