Replace runtime TLS validation with API-level CEL rules
#12338 · Go · ★ 5.7k · Apache-2.0 · updated 3mo ago
kgateway version main Kubernetes Version N/A Describe the bug The TLS plugin currently validates at runtime that a root CA is provided when verifySubjectAltName is specified in tls.go. This should be moved to CEL validation in the API types for faster feedback. Expected Behavior…