Sync APIs. @tag-name=gloo-mesh-v2.6.6 (#1363)

Co-authored-by: soloio-bot <[email protected]>

api/gloo.solo.io/networking/v2/route_table.proto

@@ -323,14 +323,17 @@ message RouteTableSpec {
   // <li>For delegated child route tables, this field must be empty or unset.
   // The values from the parent route table are always used for destination selection.</li></ul>
   //
-  // +kubebuilder:validation:XValidation:rule="self.all(s, !has(s.kind) || s.kind == 'KUBE')",message="selector kind must be KUBE or not set"
+  // +kubebuilder:validation:XValidation:rule="self.all(s, !has(s.kind) || s.kind == 'KUBE')",message="Selector kind must be KUBE or not set."
   repeated .common.gloo.solo.io.DestinationSelector apply_to_destinations = 10;
 
   // Optional: Routes that do not specify a destination forward traffic to this destination.
   // This field applies only to `forwardTo` routes.
   //
-  // </br>**Configuration constraints**: If you define a `http.forwardTo`, `tcp.forwardTo`, or `tls.forwardTo` action that does not specify at least one destination,
-  // you must set this field.
+  // </br>**Configuration constraints**:<ul>
+  // <li>If you define a `http.forwardTo`, `tcp.forwardTo`, or `tls.forwardTo` action that does not specify at least one destination, you must set this field.</li>
+  // <li>The `subset` must not be set to the empty object `{}`.</li></ul>
+  //
+  // +kubebuilder:validation:XValidation:rule="!has(self.subset) || self.subset.size() > 0",message="subset must not be an empty map."
   .common.gloo.solo.io.DestinationReference default_destination = 2;
 
   // The HTTP routes that this route table serves. If no routes match the client request,
@@ -545,6 +548,7 @@ message TLSRoute {
     // 
     // </br>**Configuration constraints**:<ul>
     // <li>If `defaultDestination` is empty, you must specify at least one destination in this field.</li>
+    // <li>A destination `subset` must not be set to the empty object `{}`.</li>
     // <li>You can optionally specify a destination `weight` to indicate the proportion of traffic 
     // to forward to this destination. Weights across all destinations must sum to 100.
     // If the sum is less than 100, the remainder is distributed across destinations that do not specify a weight,
@@ -561,7 +565,8 @@ message TLSRoute {
     //
     // +kubebuilder:validation:Required
     // +kubebuilder:validation:MinItems=1
-    // +kubebuilder:validation:MaxItems=100
+    // +kubebuilder:validation:MaxItems=99
+    // +kubebuilder:validation:XValidation:rule="self.all(d, !has(d.subset) || d.subset.size() > 0)",message="Destination subset must not be an empty map."
     repeated .common.gloo.solo.io.DestinationReference destinations = 1;
   }
 }
@@ -601,6 +606,7 @@ message ForwardToAction {
   //
   // </br>**Configuration constraints**:<ul>
   // <li>If `defaultDestination` is empty, you must specify at least one destination in this field.</li>
+  // <li>A destination `subset` must not be set to the empty object `{}`.</li>
   // <li>You can optionally specify a destination `weight` to indicate the proportion of traffic 
   // to forward to this destination. Weights across all destinations must sum to 100.
   // If the sum is less than 100, the remainder is distributed across destinations that do not specify a weight,
@@ -615,7 +621,8 @@ message ForwardToAction {
   // <li>Invalid example: Port 80 specifies a weight of `50`, port 81 a weight of `50`, and port 82 does not
   // specify a weight. All weights equal 100, but no remainder exists for port 82.</li></ul></li></ul>
   //
-  // +kubebuilder:validation:MaxItems=100
+  // +kubebuilder:validation:MaxItems=99
+  // +kubebuilder:validation:XValidation:rule="self.all(d, !has(d.subset) || d.subset.size() > 0)",message="Destination subset must not be an empty map."
   repeated .common.gloo.solo.io.DestinationReference destinations = 1;
 
   oneof path_rewrite_specifier {

api/gloo.solo.io/policy/v2/resilience/failover_policy.proto

@@ -70,7 +70,7 @@ message FailoverPolicySpec {
   // Select the destinations to apply the policy to by using labels.
   // If empty, the policy applies to all destinations in the workspace.
   // {{< alert context="info" >}}
-  // The destinations can be Kubernetes services or virtual destinations. 
+  // The destinations can be Kubernetes services or virtual destinations.
   // Note that external services are not supported as destinations with this policy.
   // {{< /alert >}}
   repeated .common.gloo.solo.io.DestinationSelector apply_to_destinations = 1;

api/gloo.solo.io/policy/v2/security/jwt_policy.proto

@@ -261,6 +261,10 @@ message JWTPolicySpec {
       // If this field is omitted or empty, the payload is not forwarded with the request.
       // To send select claims in the payload in individual headers, use the ClaimsToHeaders field instead.
       string output_payload_to_header = 9;
+
+      // Optional: Specify a custom delimiter to append claims. Defaults to a comma (`,`).
+      string custom_delimiter = 10;
+
     }
 
     // Set up the provider for the JWT configuration.