From fc4467cfbeb03550084269a99945448cdc1b8c6c Mon Sep 17 00:00:00 2001
From: caseydavenport <1944093+caseydavenport@users.noreply.github.com>
Date: Mon, 29 Jun 2026 19:33:42 +0000
Subject: [PATCH] Automatic API update from projectcalico/calico master

---
 config/crd/projectcalico.org_felixconfigurations.yaml           | 2 +-
 pkg/apis/projectcalico/v3/felixconfig.go                        | 2 +-
 .../projectcalico/v3/felixconfigurationspec.go                  | 2 +-
 pkg/openapi/generated.openapi.go                                | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/config/crd/projectcalico.org_felixconfigurations.yaml b/config/crd/projectcalico.org_felixconfigurations.yaml
index fb577c133..fbea5d30e 100644
--- a/config/crd/projectcalico.org_felixconfigurations.yaml
+++ b/config/crd/projectcalico.org_felixconfigurations.yaml
@@ -1189,7 +1189,7 @@ spec:
                 prometheusMetricsClientAuth:
                   description: |-
                     PrometheusMetricsClientAuth specifies the client authentication type for the /metrics endpoint.
-                    This determines how the server validates client certificates. Default is "RequireAndVerifyClientCert".
+                    This determines how the server validates client certificates. Default is "NoClientCert".
                   type: string
                 prometheusMetricsEnabled:
                   description:
diff --git a/pkg/apis/projectcalico/v3/felixconfig.go b/pkg/apis/projectcalico/v3/felixconfig.go
index 437a5ac8c..e9a55168e 100644
--- a/pkg/apis/projectcalico/v3/felixconfig.go
+++ b/pkg/apis/projectcalico/v3/felixconfig.go
@@ -525,7 +525,7 @@ type FelixConfigurationSpec struct {
 	PrometheusMetricsKeyFile *string `json:"prometheusMetricsKeyFile,omitempty"`
 
 	// PrometheusMetricsClientAuth specifies the client authentication type for the /metrics endpoint.
-	// This determines how the server validates client certificates. Default is "RequireAndVerifyClientCert".
+	// This determines how the server validates client certificates. Default is "NoClientCert".
 	PrometheusMetricsClientAuth *PrometheusMetricsClientAuthType `json:"prometheusMetricsClientAuth,omitempty" validate:"omitempty,oneof=RequireAndVerifyClientCert RequireAnyClientCert VerifyClientCertIfGiven NoClientCert"`
 
 	// FailsafeInboundHostPorts is a list of ProtoPort struct objects including UDP/TCP/SCTP ports and CIDRs that Felix will
diff --git a/pkg/client/applyconfiguration_generated/projectcalico/v3/felixconfigurationspec.go b/pkg/client/applyconfiguration_generated/projectcalico/v3/felixconfigurationspec.go
index 133b570a8..5e0600e14 100644
--- a/pkg/client/applyconfiguration_generated/projectcalico/v3/felixconfigurationspec.go
+++ b/pkg/client/applyconfiguration_generated/projectcalico/v3/felixconfigurationspec.go
@@ -254,7 +254,7 @@ type FelixConfigurationSpecApplyConfiguration struct {
 	// used for securing the /metrics endpoint. The private key must be valid and accessible by the calico-node process.
 	PrometheusMetricsKeyFile *string `json:"prometheusMetricsKeyFile,omitempty"`
 	// PrometheusMetricsClientAuth specifies the client authentication type for the /metrics endpoint.
-	// This determines how the server validates client certificates. Default is "RequireAndVerifyClientCert".
+	// This determines how the server validates client certificates. Default is "NoClientCert".
 	PrometheusMetricsClientAuth *projectcalicov3.PrometheusMetricsClientAuthType `json:"prometheusMetricsClientAuth,omitempty"`
 	// FailsafeInboundHostPorts is a list of ProtoPort struct objects including UDP/TCP/SCTP ports and CIDRs that Felix will
 	// allow incoming traffic to host endpoints on irrespective of the security policy. This is useful to avoid accidentally
diff --git a/pkg/openapi/generated.openapi.go b/pkg/openapi/generated.openapi.go
index 9492954be..860df68a1 100644
--- a/pkg/openapi/generated.openapi.go
+++ b/pkg/openapi/generated.openapi.go
@@ -3469,7 +3469,7 @@ func schema_pkg_apis_projectcalico_v3_FelixConfigurationSpec(ref common.Referenc
 					},
 					"prometheusMetricsClientAuth": {
 						SchemaProps: spec.SchemaProps{
-							Description: "PrometheusMetricsClientAuth specifies the client authentication type for the /metrics endpoint. This determines how the server validates client certificates. Default is \"RequireAndVerifyClientCert\".",
+							Description: "PrometheusMetricsClientAuth specifies the client authentication type for the /metrics endpoint. This determines how the server validates client certificates. Default is \"NoClientCert\".",
 							Type:        []string{"string"},
 							Format:      "",
 						},