类 DestinationRuleOuterClass.ClientTLSSettings.Builder
java.lang.Object
com.google.protobuf.AbstractMessageLite.Builder
com.google.protobuf.AbstractMessage.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
istio.networking.v1alpha3.DestinationRuleOuterClass.ClientTLSSettings.Builder
- 所有已实现的接口:
com.google.protobuf.Message.Builder,com.google.protobuf.MessageLite.Builder,com.google.protobuf.MessageLiteOrBuilder,com.google.protobuf.MessageOrBuilder,DestinationRuleOuterClass.ClientTLSSettingsOrBuilder,Cloneable
public static final class DestinationRuleOuterClass.ClientTLSSettings.Builder
extends com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
implements DestinationRuleOuterClass.ClientTLSSettingsOrBuilder
SSL/TLS related settings for upstream connections. See Envoy's [TLS
context](https://www.envoyproxy.io/docs/envoy/latest/api-v2/api/v2/auth/cert.proto.html)
for more details. These settings are common to both HTTP and TCP upstreams.
For example, the following rule configures a client to use mutual TLS
for connections to upstream database cluster.
{{<tabset category-name="example">}}
{{<tab name="v1alpha3" category-value="v1alpha3">}}
```yaml
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: db-mtls
spec:
host: mydbserver.prod.svc.cluster.local
trafficPolicy:
tls:
mode: MUTUAL
clientCertificate: /etc/certs/myclientcert.pem
privateKey: /etc/certs/client_private_key.pem
caCertificates: /etc/certs/rootcacerts.pem
```
{{</tab>}}
{{<tab name="v1beta1" category-value="v1beta1">}}
```yaml
apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
name: db-mtls
spec:
host: mydbserver.prod.svc.cluster.local
trafficPolicy:
tls:
mode: MUTUAL
clientCertificate: /etc/certs/myclientcert.pem
privateKey: /etc/certs/client_private_key.pem
caCertificates: /etc/certs/rootcacerts.pem
```
{{</tab>}}
{{</tabset>}}
The following rule configures a client to use TLS when talking to a
foreign service whose domain matches *.foo.com.
{{<tabset category-name="example">}}
{{<tab name="v1alpha3" category-value="v1alpha3">}}
```yaml
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: tls-foo
spec:
host: "*.foo.com"
trafficPolicy:
tls:
mode: SIMPLE
```
{{</tab>}}
{{<tab name="v1beta1" category-value="v1beta1">}}
```yaml
apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
name: tls-foo
spec:
host: "*.foo.com"
trafficPolicy:
tls:
mode: SIMPLE
```
{{</tab>}}
{{</tabset>}}
The following rule configures a client to use Istio mutual TLS when talking
to rating services.
{{<tabset category-name="example">}}
{{<tab name="v1alpha3" category-value="v1alpha3">}}
```yaml
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: ratings-istio-mtls
spec:
host: ratings.prod.svc.cluster.local
trafficPolicy:
tls:
mode: ISTIO_MUTUAL
```
{{</tab>}}
{{<tab name="v1beta1" category-value="v1beta1">}}
```yaml
apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
name: ratings-istio-mtls
spec:
host: ratings.prod.svc.cluster.local
trafficPolicy:
tls:
mode: ISTIO_MUTUAL
```
{{</tab>}}
{{</tabset>}}
Protobuf type istio.networking.v1alpha3.ClientTLSSettings-
方法概要
修饰符和类型方法说明addAllSubjectAltNames(Iterable<String> values) A list of alternate names to verify the subject identity in the certificate.addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) addSubjectAltNames(String value) A list of alternate names to verify the subject identity in the certificate.addSubjectAltNamesBytes(com.google.protobuf.ByteString value) A list of alternate names to verify the subject identity in the certificate.build()clear()OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.REQUIRED if mode is `MUTUAL`.The name of the secret that holds the TLS certs for the client including the CA certificates.clearField(com.google.protobuf.Descriptors.FieldDescriptor field) Indicates whether connections to this port should be secured using TLS.clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) REQUIRED if mode is `MUTUAL`.clearSni()SNI string to present to the server during TLS handshake.A list of alternate names to verify the subject identity in the certificate.clone()OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.com.google.protobuf.ByteStringOPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.REQUIRED if mode is `MUTUAL`.com.google.protobuf.ByteStringREQUIRED if mode is `MUTUAL`.The name of the secret that holds the TLS certs for the client including the CA certificates.com.google.protobuf.ByteStringThe name of the secret that holds the TLS certs for the client including the CA certificates.static final com.google.protobuf.Descriptors.Descriptorcom.google.protobuf.Descriptors.DescriptorgetMode()Indicates whether connections to this port should be secured using TLS.intIndicates whether connections to this port should be secured using TLS.REQUIRED if mode is `MUTUAL`.com.google.protobuf.ByteStringREQUIRED if mode is `MUTUAL`.getSni()SNI string to present to the server during TLS handshake.com.google.protobuf.ByteStringSNI string to present to the server during TLS handshake.getSubjectAltNames(int index) A list of alternate names to verify the subject identity in the certificate.com.google.protobuf.ByteStringgetSubjectAltNamesBytes(int index) A list of alternate names to verify the subject identity in the certificate.intA list of alternate names to verify the subject identity in the certificate.com.google.protobuf.ProtocolStringListA list of alternate names to verify the subject identity in the certificate.protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTablefinal booleanmergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) mergeFrom(com.google.protobuf.Message other) mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) setCaCertificates(String value) OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.setCaCertificatesBytes(com.google.protobuf.ByteString value) OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.setClientCertificate(String value) REQUIRED if mode is `MUTUAL`.setClientCertificateBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `MUTUAL`.setCredentialName(String value) The name of the secret that holds the TLS certs for the client including the CA certificates.setCredentialNameBytes(com.google.protobuf.ByteString value) The name of the secret that holds the TLS certs for the client including the CA certificates.Indicates whether connections to this port should be secured using TLS.setModeValue(int value) Indicates whether connections to this port should be secured using TLS.setPrivateKey(String value) REQUIRED if mode is `MUTUAL`.setPrivateKeyBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `MUTUAL`.setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value) SNI string to present to the server during TLS handshake.setSniBytes(com.google.protobuf.ByteString value) SNI string to present to the server during TLS handshake.setSubjectAltNames(int index, String value) A list of alternate names to verify the subject identity in the certificate.setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) 从类继承的方法 com.google.protobuf.GeneratedMessageV3.Builder
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapField, internalGetMapFieldReflection, internalGetMutableMapField, internalGetMutableMapFieldReflection, isClean, markClean, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setUnknownFieldSetBuilder, setUnknownFieldsProto3从类继承的方法 com.google.protobuf.AbstractMessage.Builder
findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toString从类继承的方法 com.google.protobuf.AbstractMessageLite.Builder
addAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, mergeFrom, newUninitializedMessageException从接口继承的方法 com.google.protobuf.Message.Builder
mergeDelimitedFrom, mergeDelimitedFrom从接口继承的方法 com.google.protobuf.MessageLite.Builder
mergeFrom从接口继承的方法 com.google.protobuf.MessageOrBuilder
findInitializationErrors, getAllFields, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof
-
方法详细资料
-
getDescriptor
public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() -
internalGetFieldAccessorTable
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()- 指定者:
internalGetFieldAccessorTable在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
clear
- 指定者:
clear在接口中com.google.protobuf.Message.Builder- 指定者:
clear在接口中com.google.protobuf.MessageLite.Builder- 覆盖:
clear在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
getDescriptorForType
public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()- 指定者:
getDescriptorForType在接口中com.google.protobuf.Message.Builder- 指定者:
getDescriptorForType在接口中com.google.protobuf.MessageOrBuilder- 覆盖:
getDescriptorForType在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
getDefaultInstanceForType
- 指定者:
getDefaultInstanceForType在接口中com.google.protobuf.MessageLiteOrBuilder- 指定者:
getDefaultInstanceForType在接口中com.google.protobuf.MessageOrBuilder
-
build
- 指定者:
build在接口中com.google.protobuf.Message.Builder- 指定者:
build在接口中com.google.protobuf.MessageLite.Builder
-
buildPartial
- 指定者:
buildPartial在接口中com.google.protobuf.Message.Builder- 指定者:
buildPartial在接口中com.google.protobuf.MessageLite.Builder
-
clone
- 指定者:
clone在接口中com.google.protobuf.Message.Builder- 指定者:
clone在接口中com.google.protobuf.MessageLite.Builder- 覆盖:
clone在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
setField
public DestinationRuleOuterClass.ClientTLSSettings.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) - 指定者:
setField在接口中com.google.protobuf.Message.Builder- 覆盖:
setField在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
clearField
public DestinationRuleOuterClass.ClientTLSSettings.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field) - 指定者:
clearField在接口中com.google.protobuf.Message.Builder- 覆盖:
clearField在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
clearOneof
public DestinationRuleOuterClass.ClientTLSSettings.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) - 指定者:
clearOneof在接口中com.google.protobuf.Message.Builder- 覆盖:
clearOneof在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
setRepeatedField
public DestinationRuleOuterClass.ClientTLSSettings.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value) - 指定者:
setRepeatedField在接口中com.google.protobuf.Message.Builder- 覆盖:
setRepeatedField在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
addRepeatedField
public DestinationRuleOuterClass.ClientTLSSettings.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value) - 指定者:
addRepeatedField在接口中com.google.protobuf.Message.Builder- 覆盖:
addRepeatedField在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
mergeFrom
public DestinationRuleOuterClass.ClientTLSSettings.Builder mergeFrom(com.google.protobuf.Message other) - 指定者:
mergeFrom在接口中com.google.protobuf.Message.Builder- 覆盖:
mergeFrom在类中com.google.protobuf.AbstractMessage.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
mergeFrom
public DestinationRuleOuterClass.ClientTLSSettings.Builder mergeFrom(DestinationRuleOuterClass.ClientTLSSettings other) -
isInitialized
public final boolean isInitialized()- 指定者:
isInitialized在接口中com.google.protobuf.MessageLiteOrBuilder- 覆盖:
isInitialized在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
mergeFrom
public DestinationRuleOuterClass.ClientTLSSettings.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException - 指定者:
mergeFrom在接口中com.google.protobuf.Message.Builder- 指定者:
mergeFrom在接口中com.google.protobuf.MessageLite.Builder- 覆盖:
mergeFrom在类中com.google.protobuf.AbstractMessage.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>- 抛出:
IOException
-
getModeValue
public int getModeValue()Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];- 指定者:
getModeValue在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The enum numeric value on the wire for mode.
-
setModeValue
Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];- 参数:
value- The enum numeric value on the wire for mode to set.- 返回:
- This builder for chaining.
-
getMode
Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];- 指定者:
getMode在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The mode.
-
setMode
public DestinationRuleOuterClass.ClientTLSSettings.Builder setMode(DestinationRuleOuterClass.ClientTLSSettings.TLSmode value) Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];- 参数:
value- The mode to set.- 返回:
- This builder for chaining.
-
clearMode
Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.
.istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];- 返回:
- This builder for chaining.
-
getClientCertificate
REQUIRED if mode is `MUTUAL`. The path to the file holding the client-side TLS certificate to use. Should be empty if mode is `ISTIO_MUTUAL`.
string client_certificate = 2;- 指定者:
getClientCertificate在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The clientCertificate.
-
getClientCertificateBytes
public com.google.protobuf.ByteString getClientCertificateBytes()REQUIRED if mode is `MUTUAL`. The path to the file holding the client-side TLS certificate to use. Should be empty if mode is `ISTIO_MUTUAL`.
string client_certificate = 2;- 指定者:
getClientCertificateBytes在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The bytes for clientCertificate.
-
setClientCertificate
REQUIRED if mode is `MUTUAL`. The path to the file holding the client-side TLS certificate to use. Should be empty if mode is `ISTIO_MUTUAL`.
string client_certificate = 2;- 参数:
value- The clientCertificate to set.- 返回:
- This builder for chaining.
-
clearClientCertificate
REQUIRED if mode is `MUTUAL`. The path to the file holding the client-side TLS certificate to use. Should be empty if mode is `ISTIO_MUTUAL`.
string client_certificate = 2;- 返回:
- This builder for chaining.
-
setClientCertificateBytes
public DestinationRuleOuterClass.ClientTLSSettings.Builder setClientCertificateBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `MUTUAL`. The path to the file holding the client-side TLS certificate to use. Should be empty if mode is `ISTIO_MUTUAL`.
string client_certificate = 2;- 参数:
value- The bytes for clientCertificate to set.- 返回:
- This builder for chaining.
-
getPrivateKey
REQUIRED if mode is `MUTUAL`. The path to the file holding the client's private key. Should be empty if mode is `ISTIO_MUTUAL`.
string private_key = 3;- 指定者:
getPrivateKey在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The privateKey.
-
getPrivateKeyBytes
public com.google.protobuf.ByteString getPrivateKeyBytes()REQUIRED if mode is `MUTUAL`. The path to the file holding the client's private key. Should be empty if mode is `ISTIO_MUTUAL`.
string private_key = 3;- 指定者:
getPrivateKeyBytes在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The bytes for privateKey.
-
setPrivateKey
REQUIRED if mode is `MUTUAL`. The path to the file holding the client's private key. Should be empty if mode is `ISTIO_MUTUAL`.
string private_key = 3;- 参数:
value- The privateKey to set.- 返回:
- This builder for chaining.
-
clearPrivateKey
REQUIRED if mode is `MUTUAL`. The path to the file holding the client's private key. Should be empty if mode is `ISTIO_MUTUAL`.
string private_key = 3;- 返回:
- This builder for chaining.
-
setPrivateKeyBytes
public DestinationRuleOuterClass.ClientTLSSettings.Builder setPrivateKeyBytes(com.google.protobuf.ByteString value) REQUIRED if mode is `MUTUAL`. The path to the file holding the client's private key. Should be empty if mode is `ISTIO_MUTUAL`.
string private_key = 3;- 参数:
value- The bytes for privateKey to set.- 返回:
- This builder for chaining.
-
getCaCertificates
OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate. If omitted, the proxy will not verify the server's certificate. Should be empty if mode is `ISTIO_MUTUAL`.
string ca_certificates = 4;- 指定者:
getCaCertificates在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The caCertificates.
-
getCaCertificatesBytes
public com.google.protobuf.ByteString getCaCertificatesBytes()OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate. If omitted, the proxy will not verify the server's certificate. Should be empty if mode is `ISTIO_MUTUAL`.
string ca_certificates = 4;- 指定者:
getCaCertificatesBytes在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The bytes for caCertificates.
-
setCaCertificates
OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate. If omitted, the proxy will not verify the server's certificate. Should be empty if mode is `ISTIO_MUTUAL`.
string ca_certificates = 4;- 参数:
value- The caCertificates to set.- 返回:
- This builder for chaining.
-
clearCaCertificates
OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate. If omitted, the proxy will not verify the server's certificate. Should be empty if mode is `ISTIO_MUTUAL`.
string ca_certificates = 4;- 返回:
- This builder for chaining.
-
setCaCertificatesBytes
public DestinationRuleOuterClass.ClientTLSSettings.Builder setCaCertificatesBytes(com.google.protobuf.ByteString value) OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate. If omitted, the proxy will not verify the server's certificate. Should be empty if mode is `ISTIO_MUTUAL`.
string ca_certificates = 4;- 参数:
value- The bytes for caCertificates to set.- 返回:
- This builder for chaining.
-
getCredentialName
The name of the secret that holds the TLS certs for the client including the CA certificates. Secret must exist in the same namespace with the proxy using the certificates. The secret (of type `generic`)should contain the following keys and values: `key: <privateKey>`, `cert: <serverCert>`, `cacert: <CACertificate>`. Secret of type tls for client certificates along with ca.crt key for CA certificates is also supported. Only one of client certificates and CA certificate or credentialName can be specified. **NOTE:** This field is currently applicable only at gateways. Sidecars will continue to use the certificate paths.
string credential_name = 7;- 指定者:
getCredentialName在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The credentialName.
-
getCredentialNameBytes
public com.google.protobuf.ByteString getCredentialNameBytes()The name of the secret that holds the TLS certs for the client including the CA certificates. Secret must exist in the same namespace with the proxy using the certificates. The secret (of type `generic`)should contain the following keys and values: `key: <privateKey>`, `cert: <serverCert>`, `cacert: <CACertificate>`. Secret of type tls for client certificates along with ca.crt key for CA certificates is also supported. Only one of client certificates and CA certificate or credentialName can be specified. **NOTE:** This field is currently applicable only at gateways. Sidecars will continue to use the certificate paths.
string credential_name = 7;- 指定者:
getCredentialNameBytes在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The bytes for credentialName.
-
setCredentialName
The name of the secret that holds the TLS certs for the client including the CA certificates. Secret must exist in the same namespace with the proxy using the certificates. The secret (of type `generic`)should contain the following keys and values: `key: <privateKey>`, `cert: <serverCert>`, `cacert: <CACertificate>`. Secret of type tls for client certificates along with ca.crt key for CA certificates is also supported. Only one of client certificates and CA certificate or credentialName can be specified. **NOTE:** This field is currently applicable only at gateways. Sidecars will continue to use the certificate paths.
string credential_name = 7;- 参数:
value- The credentialName to set.- 返回:
- This builder for chaining.
-
clearCredentialName
The name of the secret that holds the TLS certs for the client including the CA certificates. Secret must exist in the same namespace with the proxy using the certificates. The secret (of type `generic`)should contain the following keys and values: `key: <privateKey>`, `cert: <serverCert>`, `cacert: <CACertificate>`. Secret of type tls for client certificates along with ca.crt key for CA certificates is also supported. Only one of client certificates and CA certificate or credentialName can be specified. **NOTE:** This field is currently applicable only at gateways. Sidecars will continue to use the certificate paths.
string credential_name = 7;- 返回:
- This builder for chaining.
-
setCredentialNameBytes
public DestinationRuleOuterClass.ClientTLSSettings.Builder setCredentialNameBytes(com.google.protobuf.ByteString value) The name of the secret that holds the TLS certs for the client including the CA certificates. Secret must exist in the same namespace with the proxy using the certificates. The secret (of type `generic`)should contain the following keys and values: `key: <privateKey>`, `cert: <serverCert>`, `cacert: <CACertificate>`. Secret of type tls for client certificates along with ca.crt key for CA certificates is also supported. Only one of client certificates and CA certificate or credentialName can be specified. **NOTE:** This field is currently applicable only at gateways. Sidecars will continue to use the certificate paths.
string credential_name = 7;- 参数:
value- The bytes for credentialName to set.- 返回:
- This builder for chaining.
-
getSubjectAltNamesList
public com.google.protobuf.ProtocolStringList getSubjectAltNamesList()A list of alternate names to verify the subject identity in the certificate. If specified, the proxy will verify that the server certificate's subject alt name matches one of the specified values. If specified, this list overrides the value of subject_alt_names from the ServiceEntry.
repeated string subject_alt_names = 5;- 指定者:
getSubjectAltNamesList在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- A list containing the subjectAltNames.
-
getSubjectAltNamesCount
public int getSubjectAltNamesCount()A list of alternate names to verify the subject identity in the certificate. If specified, the proxy will verify that the server certificate's subject alt name matches one of the specified values. If specified, this list overrides the value of subject_alt_names from the ServiceEntry.
repeated string subject_alt_names = 5;- 指定者:
getSubjectAltNamesCount在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The count of subjectAltNames.
-
getSubjectAltNames
A list of alternate names to verify the subject identity in the certificate. If specified, the proxy will verify that the server certificate's subject alt name matches one of the specified values. If specified, this list overrides the value of subject_alt_names from the ServiceEntry.
repeated string subject_alt_names = 5;- 指定者:
getSubjectAltNames在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 参数:
index- The index of the element to return.- 返回:
- The subjectAltNames at the given index.
-
getSubjectAltNamesBytes
public com.google.protobuf.ByteString getSubjectAltNamesBytes(int index) A list of alternate names to verify the subject identity in the certificate. If specified, the proxy will verify that the server certificate's subject alt name matches one of the specified values. If specified, this list overrides the value of subject_alt_names from the ServiceEntry.
repeated string subject_alt_names = 5;- 指定者:
getSubjectAltNamesBytes在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 参数:
index- The index of the value to return.- 返回:
- The bytes of the subjectAltNames at the given index.
-
setSubjectAltNames
public DestinationRuleOuterClass.ClientTLSSettings.Builder setSubjectAltNames(int index, String value) A list of alternate names to verify the subject identity in the certificate. If specified, the proxy will verify that the server certificate's subject alt name matches one of the specified values. If specified, this list overrides the value of subject_alt_names from the ServiceEntry.
repeated string subject_alt_names = 5;- 参数:
index- The index to set the value at.value- The subjectAltNames to set.- 返回:
- This builder for chaining.
-
addSubjectAltNames
A list of alternate names to verify the subject identity in the certificate. If specified, the proxy will verify that the server certificate's subject alt name matches one of the specified values. If specified, this list overrides the value of subject_alt_names from the ServiceEntry.
repeated string subject_alt_names = 5;- 参数:
value- The subjectAltNames to add.- 返回:
- This builder for chaining.
-
addAllSubjectAltNames
public DestinationRuleOuterClass.ClientTLSSettings.Builder addAllSubjectAltNames(Iterable<String> values) A list of alternate names to verify the subject identity in the certificate. If specified, the proxy will verify that the server certificate's subject alt name matches one of the specified values. If specified, this list overrides the value of subject_alt_names from the ServiceEntry.
repeated string subject_alt_names = 5;- 参数:
values- The subjectAltNames to add.- 返回:
- This builder for chaining.
-
clearSubjectAltNames
A list of alternate names to verify the subject identity in the certificate. If specified, the proxy will verify that the server certificate's subject alt name matches one of the specified values. If specified, this list overrides the value of subject_alt_names from the ServiceEntry.
repeated string subject_alt_names = 5;- 返回:
- This builder for chaining.
-
addSubjectAltNamesBytes
public DestinationRuleOuterClass.ClientTLSSettings.Builder addSubjectAltNamesBytes(com.google.protobuf.ByteString value) A list of alternate names to verify the subject identity in the certificate. If specified, the proxy will verify that the server certificate's subject alt name matches one of the specified values. If specified, this list overrides the value of subject_alt_names from the ServiceEntry.
repeated string subject_alt_names = 5;- 参数:
value- The bytes of the subjectAltNames to add.- 返回:
- This builder for chaining.
-
getSni
SNI string to present to the server during TLS handshake.
string sni = 6;- 指定者:
getSni在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The sni.
-
getSniBytes
public com.google.protobuf.ByteString getSniBytes()SNI string to present to the server during TLS handshake.
string sni = 6;- 指定者:
getSniBytes在接口中DestinationRuleOuterClass.ClientTLSSettingsOrBuilder- 返回:
- The bytes for sni.
-
setSni
SNI string to present to the server during TLS handshake.
string sni = 6;- 参数:
value- The sni to set.- 返回:
- This builder for chaining.
-
clearSni
SNI string to present to the server during TLS handshake.
string sni = 6;- 返回:
- This builder for chaining.
-
setSniBytes
public DestinationRuleOuterClass.ClientTLSSettings.Builder setSniBytes(com.google.protobuf.ByteString value) SNI string to present to the server during TLS handshake.
string sni = 6;- 参数:
value- The bytes for sni to set.- 返回:
- This builder for chaining.
-
setUnknownFields
public final DestinationRuleOuterClass.ClientTLSSettings.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) - 指定者:
setUnknownFields在接口中com.google.protobuf.Message.Builder- 覆盖:
setUnknownFields在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-
mergeUnknownFields
public final DestinationRuleOuterClass.ClientTLSSettings.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) - 指定者:
mergeUnknownFields在接口中com.google.protobuf.Message.Builder- 覆盖:
mergeUnknownFields在类中com.google.protobuf.GeneratedMessageV3.Builder<DestinationRuleOuterClass.ClientTLSSettings.Builder>
-