BackendTLSPolicy SANs field marked as extended

Signed-off-by: Mattia Lavacca <[email protected]>

Author: mlavacca

apis/v1alpha3/backendtlspolicy_types.go

@@ -151,18 +151,18 @@ type BackendTLSPolicyValidation struct {
 	// backends:
 	//
 	// 1. Hostname MUST be used as the SNI to connect to the backend (RFC 6066).
-	// 2. If SubjectAltNames is not specified, Hostname MUST be used for
+	// 2. If SubjectAltNames is not specified or unsupported, Hostname MUST be used for
 	//    authentication and MUST match the certificate served by the matching
 	//    backend.
 	//
 	// Support: Core
 	Hostname v1.PreciseHostname `json:"hostname"`
 
 	// SubjectAltNames contains one or more Subject Alternative Names.
-	// When specified, the certificate served from the backend MUST have at least one
-	// Subject Alternate Name matching one of the specified SubjectAltNames.
+	// When specified, if supported, the certificate served from the backend MUST
+	// have at least one Subject Alternate Name matching one of the specified SubjectAltNames.
 	//
-	// Support: Core
+	// Support: Extended
 	//
 	// +optional
 	// +kubebuilder:validation:MaxItems=5

config/crd/experimental/gateway.networking.k8s.io_backendtlspolicies.yaml

@@ -6,6 +6,8 @@ status: Experimental
 authors:
   - mkosieradzki
   - robscott
+featureNames:
+  - BackendTLSPolicySANs
 relationships:
   seeAlso:
     - number: 2907