fix(kuma-cp): handle external services with permissive mtls (backport…

… of #7179) (#7186) * fix(kuma-cp): handle external services with permissive mtls (#7179) Signed-off-by: Jakub Dyszkiewicz <jakub.dyszkiewicz@gmail.com> * chore: resolve conflict Signed-off-by: Jakub Dyszkiewicz <jakub.dyszkiewicz@gmail.com> --------- Signed-off-by: Jakub Dyszkiewicz <jakub.dyszkiewicz@gmail.com> Co-authored-by: Jakub Dyszkiewicz <jakub.dyszkiewicz@gmail.com>
kumahq · Jul 7, 2023 · 0ecc948 · 0ecc948
1 parent 642ef5b
commit 0ecc948
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/pkg/xds/context/mesh_context_builder.go b/pkg/xds/context/mesh_context_builder.go
@@ -402,7 +402,11 @@ func (m *meshContextBuilder) resolveTLSReadiness(mesh *core_mesh.MeshResource, s
 	}
 
 	for svc, insight := range serviceInsights.Items[0].Spec.GetServices() {
-		tlsReady[svc] = insight.IssuedBackends[backend.Name] == insight.Dataplanes.Total
+		if insight.ServiceType == mesh_proto.ServiceInsight_Service_external {
+			tlsReady[svc] = true
+		} else {
+			tlsReady[svc] = insight.IssuedBackends[backend.Name] == insight.Dataplanes.Total
+		}
 	}
 	return tlsReady
 }