Skip to content

Commit 2a97e7b

Browse files
committed
Apply PR feedback
Signed-off-by: Norwin Schnyder <[email protected]>
1 parent f14b435 commit 2a97e7b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

geps/gep-1897/index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -214,7 +214,7 @@ configuration. CACertificateRefs is an implementation-specific slice of
214214
named object references, each containing a single cert. We originally proposed to follow the convention established by the
215215
[CertificateRefs field on Gateway](https://github.com/kubernetes-sigs/gateway-api/blob/18e79909f7310aafc625ba7c862dfcc67b385250/apis/v1beta1/gateway_types.go#L340)
216216
, but the CertificateRef requires both a tls.key and tls.crt and a certificate reference only requires the tls.crt.
217-
If the CertificateRef cannot be resolved or does not include a certificate (tls.crt), the BackendTLSPolicy is considered invalid.
217+
If any of the CACertificateRefs cannot be resolved or is misconfigured, the BackendTLSPolicy is considered invalid.
218218

219219
WellKnownCACertificates is an optional enum that allows users to specify whether to use the set of CA certificates trusted by the
220220
Gateway (WellKnownCACertificates specified as "System"), or to use the existing CACertificateRefs (WellKnownCACertificates

0 commit comments

Comments
 (0)