From 6dd0b032de6d87f710c316b198305222b2692556 Mon Sep 17 00:00:00 2001
From: John Howard <john.howard@solo.io>
Date: Wed, 30 Oct 2024 07:20:33 -0700
Subject: [PATCH] add doc

---
 security/v1beta1/authorization_policy.pb.go   | 2 ++
 security/v1beta1/authorization_policy.pb.html | 3 ++-
 security/v1beta1/authorization_policy.proto   | 2 ++
 3 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/security/v1beta1/authorization_policy.pb.go b/security/v1beta1/authorization_policy.pb.go
index 5ebe984e9c..6509186117 100644
--- a/security/v1beta1/authorization_policy.pb.go
+++ b/security/v1beta1/authorization_policy.pb.go
@@ -647,6 +647,8 @@ type Source struct {
 	// If not set, any service account is allowed.
 	//
 	// No form of wildcard (`*`) is allowed.
+	// Cannot be set with `principals` or `namespaces`.
+	//
 	// +protoc-gen-crd:list-value-validation:MaxLength=320
 	// +kubebuilder:validation:MaxItems=16
 	ServiceAccounts []string `protobuf:"bytes,11,rep,name=service_accounts,json=serviceAccounts,proto3" json:"service_accounts,omitempty"`
diff --git a/security/v1beta1/authorization_policy.pb.html b/security/v1beta1/authorization_policy.pb.html
index 9653860537..9343e9c653 100644
--- a/security/v1beta1/authorization_policy.pb.html
+++ b/security/v1beta1/authorization_policy.pb.html
@@ -452,7 +452,8 @@ <h2 id="Source">Source</h2>
 This field requires mTLS enabled and is the same as the <code>source.serviceaccount</code> attribute.</p>
 <p>This takes the format <code>&lt;namespace&gt;/&lt;serviceaccount&gt;</code>.</p>
 <p>If not set, any service account is allowed.</p>
-<p>No form of wildcard (<code>*</code>) is allowed.</p>
+<p>No form of wildcard (<code>*</code>) is allowed.
+Cannot be set with <code>principals</code> or <code>namespaces</code>.</p>
 
 </td>
 <td>
diff --git a/security/v1beta1/authorization_policy.proto b/security/v1beta1/authorization_policy.proto
index a3325c550a..37ac5c64a3 100644
--- a/security/v1beta1/authorization_policy.proto
+++ b/security/v1beta1/authorization_policy.proto
@@ -466,6 +466,8 @@ message Source {
   // If not set, any service account is allowed.
   //
   // No form of wildcard (`*`) is allowed.
+  // Cannot be set with `principals` or `namespaces`.
+  //
   // +protoc-gen-crd:list-value-validation:MaxLength=320
   // +kubebuilder:validation:MaxItems=16
   repeated string service_accounts = 11;