Merge pull request #27458 from neal-timpe/ossmdoc-150

OSSMDOC-150

Author: JStickler

service_mesh/v2x/upgrading-ossm.adoc

@@ -201,7 +201,7 @@ Built-in WASM filters included in the upstream Istio distribution are not availa
 [id="ossm-upgrading-mig-mtls_{context}"]
 === Mutual TLS changes
 
-The mTLS feature only considers PeerAuthentication policies that affect an entire namespace or the entire mesh. There is no selector. When using mTLS with workload specific PeerAuthentication policies, a corresponding DestinationRule is required to allow traffic if the workload policy differs from the namespace/global policy.
+When using mTLS with workload specific PeerAuthentication policies, a corresponding DestinationRule is required to allow traffic if the workload policy differs from the namespace/global policy.
 
 Auto mTLS is enabled by default, but can be disabled by setting `spec.security.dataPlane.automtls` to false in the `ServiceMeshControlPlane` resource. When disabling auto mTLS, DestinationRules may be required for proper communication between services. For example, setting PeerAuthentication to `STRICT` for one namespace may prevent services in other namespaces from accessing them, unless a DestinationRule configures TLS mode for the services in the namespace.