Skip to content

Commit

Permalink
Fix env variable name for VerifyCertAtClient (#3012)
Browse files Browse the repository at this point in the history
Signed-off-by: Faseela K <[email protected]>
  • Loading branch information
kfaseela authored Dec 5, 2023
1 parent 342d60d commit 515df8d
Show file tree
Hide file tree
Showing 6 changed files with 49 additions and 45 deletions.
44 changes: 24 additions & 20 deletions kubernetes/customresourcedefinitions.gen.yaml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 5 additions & 5 deletions networking/v1alpha3/destination_rule.pb.go

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 5 additions & 5 deletions networking/v1alpha3/destination_rule.pb.html

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 5 additions & 5 deletions networking/v1alpha3/destination_rule.proto
Original file line number Diff line number Diff line change
Expand Up @@ -1151,16 +1151,16 @@ message ClientTLSSettings {
// environmental variable is set to `true`.
string sni = 6;

// InsecureSkipVerify specifies whether the proxy should skip verifying the
// `insecureSkipVerify` specifies whether the proxy should skip verifying the
// CA signature and SAN for the server certificate corresponding to the host.
// This flag should only be set if global CA signature verification is
// enabled, `VerifyCertAtClient` environmental variable is set to `true`,
// enabled, `VERIFY_CERTIFICATE_AT_CLIENT` environmental variable is set to `true`,
// but no verification is desired for a specific host. If enabled with or
// without `VerifyCertAtClient` enabled, verification of the CA signature and
// without `VERIFY_CERTIFICATE_AT_CLIENT` enabled, verification of the CA signature and
// SAN will be skipped.
//
// `InsecureSkipVerify` is `false` by default.
// `VerifyCertAtClient` is `false` by default in Istio version 1.9 but will
// `insecureSkipVerify` is `false` by default.
// `VERIFY_CERTIFICATE_AT_CLIENT` is `false` by default in Istio version 1.9 but will
// be `true` by default in a later version where, going forward, it will be
// enabled by default.
google.protobuf.BoolValue insecure_skip_verify = 8;
Expand Down
10 changes: 5 additions & 5 deletions networking/v1beta1/destination_rule.pb.go

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 5 additions & 5 deletions networking/v1beta1/destination_rule.proto
Original file line number Diff line number Diff line change
Expand Up @@ -1100,16 +1100,16 @@ message ClientTLSSettings {
// environmental variable is set to `true`.
string sni = 6;

// InsecureSkipVerify specifies whether the proxy should skip verifying the
// `insecureSkipVerify` specifies whether the proxy should skip verifying the
// CA signature and SAN for the server certificate corresponding to the host.
// This flag should only be set if global CA signature verification is
// enabled, `VerifyCertAtClient` environmental variable is set to `true`,
// enabled, `VERIFY_CERTIFICATE_AT_CLIENT` environmental variable is set to `true`,
// but no verification is desired for a specific host. If enabled with or
// without `VerifyCertAtClient` enabled, verification of the CA signature and
// without `VERIFY_CERTIFICATE_AT_CLIENT` enabled, verification of the CA signature and
// SAN will be skipped.
//
// `InsecureSkipVerify` is `false` by default.
// `VerifyCertAtClient` is `false` by default in Istio version 1.9 but will
// `insecureSkipVerify` is `false` by default.
// `VERIFY_CERTIFICATE_AT_CLIENT` is `false` by default in Istio version 1.9 but will
// be `true` by default in a later version where, going forward, it will be
// enabled by default.
google.protobuf.BoolValue insecure_skip_verify = 8;
Expand Down

0 comments on commit 515df8d

Please sign in to comment.