Extend authorization policy action with 'Audit' action

proto.lock

@@ -13049,13 +13049,7 @@
                         "value": "/v1/services/{service_name}/configs/{config_id}"
                       },
                       {
-                        "name": "additional_bindings",
-                        "aggregated": [
-                          {
-                            "name": "get",
-                            "value": "/v1/services/{service_name}/config"
-                          }
-                        ]
+                        "name": "additional_bindings"
                       }
                     ]
                   }
@@ -46005,6 +45999,60 @@
         ]
       }
     },
+    {
+      "protopath": "security:/:v1alpha1:/:ca.proto",
+      "def": {
+        "messages": [
+          {
+            "name": "IstioCertificateRequest",
+            "fields": [
+              {
+                "id": 1,
+                "name": "csr",
+                "type": "string"
+              },
+              {
+                "id": 3,
+                "name": "validity_duration",
+                "type": "int64"
+              }
+            ]
+          },
+          {
+            "name": "IstioCertificateResponse",
+            "fields": [
+              {
+                "id": 1,
+                "name": "cert_chain",
+                "type": "string",
+                "is_repeated": true
+              }
+            ]
+          }
+        ],
+        "services": [
+          {
+            "name": "IstioCertificateService",
+            "rpcs": [
+              {
+                "name": "CreateCertificate",
+                "in_type": "IstioCertificateRequest",
+                "out_type": "IstioCertificateResponse"
+              }
+            ]
+          }
+        ],
+        "package": {
+          "name": "istio.v1.auth"
+        },
+        "options": [
+          {
+            "name": "go_package",
+            "value": "istio.io/api/security/v1alpha1"
+          }
+        ]
+      }
+    },
     {
       "protopath": "security:/:v1beta1:/:authorization.proto",
       "def": {
@@ -46018,6 +46066,10 @@
               {
                 "name": "DENY",
                 "integer": 1
+              },
+              {
+                "name": "AUDIT",
+                "integer": 2
               }
             ]
           }

security/v1beta1/authorization.gen.json

@@ -57,7 +57,8 @@
         "type": "string",
         "enum": [
           "ALLOW",
-          "DENY"
+          "DENY",
+          "AUDIT"
         ]
       },
       "istio.security.v1beta1.Rule.From": {