Add timeout field to JWTRule (#3018)

* Add timeout field to JWTRule

* Change timeout comment

* Sync gen files

* Sync gen files 2

* Adjust comment

* minor changes to comment

Author: leosarra

kubernetes/customresourcedefinitions.gen.yaml

@@ -47546,6 +47546,11 @@
                 "name": "output_claim_to_headers",
                 "type": "ClaimToHeader",
                 "is_repeated": true
+              },
+              {
+                "id": 13,
+                "name": "timeout",
+                "type": "google.protobuf.Duration"
               }
             ]
           },
@@ -47587,6 +47592,9 @@
           }
         ],
         "imports": [
+          {
+            "path": "google/protobuf/duration.proto"
+          },
           {
             "path": "google/api/field_behavior.proto"
           }
@@ -48059,6 +48067,11 @@
                 "name": "output_claim_to_headers",
                 "type": "ClaimToHeader",
                 "is_repeated": true
+              },
+              {
+                "id": 13,
+                "name": "timeout",
+                "type": "google.protobuf.Duration"
               }
             ]
           },
@@ -48100,6 +48113,9 @@
           }
         ],
         "imports": [
+          {
+            "path": "google/protobuf/duration.proto"
+          },
           {
             "path": "google/api/field_behavior.proto"
           }

proto.lock

@@ -13,6 +13,7 @@
 // limitations under the License.
 syntax = "proto3";
 
+import "google/protobuf/duration.proto";
 import "google/api/field_behavior.proto";
 
 // $schema: istio.security.v1.JWTRule
@@ -178,8 +179,12 @@ message JWTRule {
   // [Experimental] This feature is a experimental feature.
   repeated ClaimToHeader output_claim_to_headers = 11; // [TODO:Update the status whenever this feature is promoted.]
 
+  // The maximum amount of time that the resolver, determined by the PILOT_JWT_ENABLE_REMOTE_JWKS environment variable,
+  // will spend waiting for the JWKS to be fetched. Default is 5s.
+  google.protobuf.Duration timeout = 13;
+
   // $hide_from_docs
-  // Next available field number: 13
+  // Next available field number: 14
 }
 
 // This message specifies a header location to extract JWT token.

security/v1/jwt.pb.go

@@ -13,6 +13,7 @@
 // limitations under the License.
 syntax = "proto3";
 
+import "google/protobuf/duration.proto";
 import "google/api/field_behavior.proto";
 
 // $schema: istio.security.v1beta1.JWTRule
@@ -177,8 +178,12 @@ message JWTRule {
   // [Experimental] This feature is a experimental feature.
   repeated ClaimToHeader output_claim_to_headers = 11; // [TODO:Update the status whenever this feature is promoted.]
 
+  // The maximum amount of time that the resolver, determined by the PILOT_JWT_ENABLE_REMOTE_JWKS environment variable,
+  // will spend waiting for the JWKS to be fetched. Default is 5s.
+  google.protobuf.Duration timeout = 13;
+
   // $hide_from_docs
-  // Next available field number: 13
+  // Next available field number: 14
 }
 
 // This message specifies a header location to extract JWT token.