diff --git a/api/v1alpha1/jwt_types.go b/api/v1alpha1/jwt_types.go index ecf7842ad0f..5572d1e10dc 100644 --- a/api/v1alpha1/jwt_types.go +++ b/api/v1alpha1/jwt_types.go @@ -78,11 +78,13 @@ type JWTProvider struct { // RemoteJWKS defines how to fetch and cache JSON Web Key Sets (JWKS) from a remote HTTP/HTTPS endpoint. // +kubebuilder:validation:XValidation:rule="!has(self.backendRef)",message="BackendRefs must be used, backendRef is not supported." type RemoteJWKS struct { - // BackendRefs is used to specify the address of the Remote JWKS. + // BackendRefs is used to specify the address of the Remote JWKS. The BackendRefs are optional, if not specified, + // the backend service is extracted from the host and port of the URI field. // // TLS configuration can be specified in a BackendTLSConfig resource and target the BackendRefs. // - // Other settings for the connection to the OIDC Provider can be specified in the BackendSettings resource. + // Other settings for the connection to remote JWKS can be specified in the BackendSettings resource. + // Currently, only the retry policy is supported. // // +optional BackendCluster `json:",inline"` diff --git a/api/v1alpha1/oidc_types.go b/api/v1alpha1/oidc_types.go index 8591cc20f0d..de05eb16782 100644 --- a/api/v1alpha1/oidc_types.go +++ b/api/v1alpha1/oidc_types.go @@ -116,6 +116,7 @@ type OIDCProvider struct { // TLS configuration can be specified in a BackendTLSConfig resource and target the BackendRefs. // // Other settings for the connection to the OIDC Provider can be specified in the BackendSettings resource. + // Currently, only the retry policy is supported. // // +optional BackendCluster `json:",inline"`