fix(kuma-cp): handle external services with permissive mtls (backport…

… of #7179) (#7188) * fix(kuma-cp): handle external services with permissive mtls (#7179) Signed-off-by: Jakub Dyszkiewicz <[email protected]> * chore: resolve conflict Signed-off-by: Jakub Dyszkiewicz <[email protected]> --------- Signed-off-by: Jakub Dyszkiewicz <[email protected]> Co-authored-by: Jakub Dyszkiewicz <[email protected]>
kumahq · Jul 7, 2023 · 6c11867 · 6c11867
1 parent b07c3be
commit 6c11867
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/pkg/xds/context/mesh_context_builder.go b/pkg/xds/context/mesh_context_builder.go
@@ -403,7 +403,11 @@ func (m *meshContextBuilder) resolveTLSReadiness(mesh *core_mesh.MeshResource, s
 	}
 
 	for svc, insight := range serviceInsights.Items[0].Spec.GetServices() {
-		tlsReady[svc] = insight.IssuedBackends[backend.Name] == insight.Dataplanes.Total
+		if insight.ServiceType == mesh_proto.ServiceInsight_Service_external {
+			tlsReady[svc] = true
+		} else {
+			tlsReady[svc] = insight.IssuedBackends[backend.Name] == insight.Dataplanes.Total
+		}
 	}
 	return tlsReady
 }