From cfafc9263462ccd3083aff55cfdf69da8d4586a4 Mon Sep 17 00:00:00 2001 From: Kenneth Jenkins <51246568+kenjenkins@users.noreply.github.com> Date: Tue, 8 Aug 2023 10:32:17 -0700 Subject: [PATCH] address lint warnings --- config/mtls.go | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/config/mtls.go b/config/mtls.go index a4e6fe889..20619362c 100644 --- a/config/mtls.go +++ b/config/mtls.go @@ -16,14 +16,18 @@ import ( type MTLSEnforcement string const ( - // No default client certificate enforcement: any requirements must be - // explicitly specified in a policy. + // MTLSEnforcementPolicy specifies no default client certificate + // enforcement: any requirements must be explicitly specified in a policy. MTLSEnforcementPolicy MTLSEnforcement = "policy" - // Enforce client certificate requirements via a default policy deny rule. + // MTLSEnforcementPolicyWithDefaultDeny specifies that client certificate + // requirements will be enforced by route policy, with a default + // invalid_client_certificate deny rule added to each policy. MTLSEnforcementPolicyWithDefaultDeny MTLSEnforcement = "policy_with_default_deny" - // Enforce client certificate requirements by rejecting connection attempts. + // MTLSEnforcementRejectConnection specifies that client certificate + // requirements will be enforced by rejecting any connection attempts + // without a trusted certificate. MTLSEnforcementRejectConnection MTLSEnforcement = "reject_connection" )