BackendTLSPolicy SANs field marked as extended (kubernetes-sigs#3591)

* BackendTLSPolicy SANs field marked as extended

Signed-off-by: Mattia Lavacca <lavacca.mattia@gmail.com>

* Apply suggestions from code review

Co-authored-by: Shane Utt <shane@shaneutt.com>

* Address reviews' comments

Signed-off-by: Mattia Lavacca <lavacca.mattia@gmail.com>

---------

Signed-off-by: Mattia Lavacca <lavacca.mattia@gmail.com>
Co-authored-by: Shane Utt <shane@shaneutt.com>

Author: 2 people

apis/openapi/zz_generated.openapi.go

@@ -151,18 +151,18 @@ type BackendTLSPolicyValidation struct {
 	// backends:
 	//
 	// 1. Hostname MUST be used as the SNI to connect to the backend (RFC 6066).
-	// 2. If SubjectAltNames is not specified, Hostname MUST be used for
+	// 2. Hostname MUST be used for authentication and MUST match the certificate served by the matching backend, unless SubjectAltNames is specified.
 	//    authentication and MUST match the certificate served by the matching
 	//    backend.
 	//
 	// Support: Core
 	Hostname v1.PreciseHostname `json:"hostname"`
 
 	// SubjectAltNames contains one or more Subject Alternative Names.
-	// When specified, the certificate served from the backend MUST have at least one
-	// Subject Alternate Name matching one of the specified SubjectAltNames.
+	// When specified the certificate served from the backend MUST
+	// have at least one Subject Alternate Name matching one of the specified SubjectAltNames.
 	//
-	// Support: Core
+	// Support: Extended
 	//
 	// +optional
 	// +kubebuilder:validation:MaxItems=5

apis/v1alpha3/backendtlspolicy_types.go

@@ -6,6 +6,8 @@ status: Experimental
 authors:
   - mkosieradzki
   - robscott
+featureNames:
+  - BackendTLSPolicySANs
 relationships:
   seeAlso:
     - number: 2907