Some corrections

* Remove subset notes
* Add source_* notes

Author: Stevenjin8

networking/v1alpha3/destination_rule.proto

@@ -174,8 +174,6 @@ message DestinationRule {
 
   // One or more named sets that represent individual versions of a
   // service. Traffic policies can be overridden at subset level.
-  // Note that subsets are not support in ambient mode.
-  // Define multiple services instead.
   repeated Subset subsets = 3;
 
   // A list of namespaces to which this destination rule is exported.
@@ -320,8 +318,6 @@ message TrafficPolicy {
 // **Note:** Policies specified for subsets will not take effect until
 // a route rule explicitly sends traffic to this subset.
 //
-// **Note:** Subsets are not supported in ambient mode. Define multiple services instead.
-//
 // One or more labels are typically required to identify the subset destination,
 // however, when the corresponding DestinationRule represents a host that
 // supports multiple SNI hosts (e.g., an egress gateway), a subset without labels

networking/v1alpha3/service_entry.pb.go

@@ -465,7 +465,7 @@ message ServiceEntry {
   //    service accounts associated with the pods of the service, the
   //    SANs specified here will also be verified.
   //
-  // **NOTE 3:** Wildcard hostnames are not support in ambient mode.
+  // **NOTE 3:** Ambient mode does not support wildcard hostsnames.
   //
   // +kubebuilder:validation:MinItems=1
   // +kubebuilder:validation:MaxItems=256
@@ -598,6 +598,9 @@ message ServiceEntry {
   // For a Kubernetes Service, the equivalent effect can be achieved by setting
   // the annotation "networking.istio.io/exportTo" to a comma-separated list
   // of namespace names.
+  //
+  // **Note:** Ambient mode does not support this field. Service entries will
+  // be exported to all namespaces.
   repeated string export_to = 7;
 
   // If specified, the proxy will verify that the server certificate's

networking/v1alpha3/service_entry.pb.html

@@ -818,6 +818,8 @@ message HTTPMatchRequest {
   //
   // **Note:** This is not a runtime match, but is a selector; it filters which workloads the
   // VirtualService applies to.
+  //
+  // **Note:** Ambient mode does not support this field.
   map<string, string> source_labels = 7;
 
   // Names of gateways where the rule should be applied. Gateway names
@@ -859,6 +861,8 @@ message HTTPMatchRequest {
   //
   // **Note:** This is not a runtime match, but is a selector; it filters which workloads the
   // VirtualService applies to.
+  //
+  // **Note:** Ambient mode does not support this field.
   string source_namespace = 13;
 
   // The human readable prefix to use when emitting statistics for this route.
@@ -990,6 +994,8 @@ message L4MatchAttributes {
   //
   // **Note:** This is not a runtime match, but is a selector; it filters which workloads the
   // VirtualService applies to.
+  //
+  // **Note:** Ambient mode does not support this field.
   map<string, string> source_labels = 4;
 
   // Names of gateways where the rule should be applied. Gateway names
@@ -1003,6 +1009,8 @@ message L4MatchAttributes {
   //
   // **Note:** This is not a runtime match, but is a selector; it filters which workloads the
   // VirtualService applies to.
+  //
+  // **Note:** Ambient mode does not support this field.
   string source_namespace = 6;
 }
 
@@ -1034,6 +1042,8 @@ message TLSMatchAttributes {
   //
   // **Note:** This is not a runtime match, but is a selector; it filters which workloads the
   // VirtualService applies to.
+  //
+  // **Note:** Ambient mode does not support this field.
   map<string, string> source_labels = 5;
 
   // Names of gateways where the rule should be applied. Gateway names
@@ -1047,6 +1057,8 @@ message TLSMatchAttributes {
   //
   // **Note:** This is not a runtime match, but is a selector; it filters which workloads the
   // VirtualService applies to.
+  //
+  // **Note:** Ambient mode does not support this field.
   string source_namespace = 7;
 }