api: allow_any_dynamic_dns mode in outbound traffic policy

Signed-off-by: Rudrakh Panigrahi <rudrakh97@gmail.com>

Author: rudrakhp

kubernetes/customresourcedefinitions.gen.yaml

@@ -579,6 +579,9 @@ message OutboundTrafficPolicy {
     // This mode allows users that do not have all possible egress destinations registered through `ServiceEntry` configurations to still connect
     // to arbitrary destinations.
     ALLOW_ANY = 1;
+    // In `ALLOW_ANY_DYNAMIC_DNS` mode, any traffic to unknown destinations will be allowed using dynamic DNS resolution.
+    // Client TLS settings can be configured for connections to such destinations.
+    ALLOW_ANY_DYNAMIC_DNS = 2;
   }
   Mode mode = 1;
 
@@ -597,6 +600,11 @@ message OutboundTrafficPolicy {
   // connections.
   // $hide_from_docs
   Destination egress_proxy = 2;
+
+  // TLS settings to apply for outbound traffic to unknown destinations.
+  // Valid only when mode is set to `ALLOW_ANY_DYNAMIC_DNS`.
+  // If not specified, no TLS will be applied to outbound traffic.
+  ClientTLSSettings tls = 3;
 }
 
 // `CaptureMode` describes how traffic to a listener is expected to be