Document exportTo restrictions

Makefile

@@ -20,10 +20,11 @@ pwd := $(shell pwd)
 mount_dir := /src
 repo_dir := istio.io/api
 repo_mount := $(mount_dir)/istio.io/api
-docker_gen := docker run --rm -v $(pwd):$(repo_mount) -w $(mount_dir) $(gen_img) -I$(repo_dir)
+uid := $(shell id -u)
+docker_gen := docker run --rm --user $(uid) -v /etc/passwd:/etc/passwd:ro -v $(pwd):$(repo_mount) -w $(mount_dir) $(gen_img) -I$(repo_dir)
 out_path = .
-docker_lock = docker run --rm -v $(pwd):$(repo_mount) -w $(repo_mount) $(lock_img)
-docker_tool = docker run --rm -v $(pwd):$(repo_mount) -w $(repo_mount) $(all_img) prototool
+docker_lock = docker run --rm --user $(uid) -v /etc/passwd:/etc/passwd:ro -v $(pwd):$(repo_mount) -w $(repo_mount) $(lock_img)
+docker_tool = docker run --rm --user $(uid) -v /etc/passwd:/etc/passwd:ro -v $(pwd):$(repo_mount) -w $(repo_mount) $(all_img) prototool
 endif
 
 ########################

OWNERS

@@ -11,7 +11,7 @@ reviewers:
   - ozevren
   - qiwzhang
   - rshriram
-  - sebastienvas
+  - utka
   - wattli
 approvers:
   - andraxylia
@@ -25,5 +25,5 @@ approvers:
   - ozevren
   - qiwzhang
   - rshriram
-  - sebastienvas
+  - utka
   - wattli

README.md

@@ -21,3 +21,13 @@ changes.
 
 
 If releasing a new tagged version, please update python/istio-api/setup.py version to reflect.
+
+## Backwards Incompatible Changes
+
+If a PR tries to make backwards incompatible changes, it will be
+blocked by protolock. To force these changes in, install
+[protolock](https://github.com/nilslice/protolock) and run
+`protolock commit --force`.
+
+You must include a note in your PR that you had to force the
+protolock and why.

WORKSPACE

@@ -3,13 +3,17 @@ workspace(name = "io_istio_api")
 load("//:check_bazel_version.bzl", "check_version")
 check_version()
 
-git_repository(
+# Oct 12, 2017 (Add `build_external` option to `go_repository`)
+RULES_GO_SHA = "9cf23e2aab101f86e4f51d8c5e0f14c012c2161c"
+RULES_GO_SHA256 = "76133849005134eceba9080ee28cef03316fd29f64a0a8a3ae09cd8862531d15"
+
+load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+http_archive(
     name = "io_bazel_rules_go",
-    commit = "9cf23e2aab101f86e4f51d8c5e0f14c012c2161c",  # Oct 12, 2017 (Add `build_external` option to `go_repository`)
-    remote = "https://github.com/bazelbuild/rules_go.git",
+    strip_prefix = "rules_go-" + RULES_GO_SHA,
+    url = "https://github.com/bazelbuild/rules_go/archive/" + RULES_GO_SHA + ".tar.gz",
+    sha256 = RULES_GO_SHA256,
 )
 
 load("//:api_dependencies.bzl", "mixer_api_dependencies")
 mixer_api_dependencies()
-
-

authentication/v1alpha1/policy.proto

@@ -290,7 +290,7 @@ enum PrincipalBinding {
 //   name: productpage_mTLS_with_JWT
 //   namespace: frod
 // spec:
-//   target:
+//   targets:
 //   - name: productpage
 //     ports:
 //     - number: 9000