程序包 istio.networking.v1alpha3

接口 DestinationRuleOuterClass.ClientTLSSettingsOrBuilder

所有超级接口:
com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder
所有已知实现类:
DestinationRuleOuterClass.ClientTLSSettings, DestinationRuleOuterClass.ClientTLSSettings.Builder
封闭类:
DestinationRuleOuterClass
public static interface DestinationRuleOuterClass.ClientTLSSettingsOrBuilder extends com.google.protobuf.MessageOrBuilder

  • 方法概要

    修饰符和类型
    方法
    说明
    String
    getCaCertificates()
    OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.
    com.google.protobuf.ByteString
    getCaCertificatesBytes()
    OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.
    String
    getClientCertificate()
    REQUIRED if mode is `MUTUAL`.
    com.google.protobuf.ByteString
    getClientCertificateBytes()
    REQUIRED if mode is `MUTUAL`.
    String
    getCredentialName()
    The name of the secret that holds the TLS certs for the client including the CA certificates.
    com.google.protobuf.ByteString
    getCredentialNameBytes()
    The name of the secret that holds the TLS certs for the client including the CA certificates.
    DestinationRuleOuterClass.ClientTLSSettings.TLSmode
    getMode()
    Indicates whether connections to this port should be secured using TLS.
    int
    getModeValue()
    Indicates whether connections to this port should be secured using TLS.
    String
    getPrivateKey()
    REQUIRED if mode is `MUTUAL`.
    com.google.protobuf.ByteString
    getPrivateKeyBytes()
    REQUIRED if mode is `MUTUAL`.
    String
    getSni()
    SNI string to present to the server during TLS handshake.
    com.google.protobuf.ByteString
    getSniBytes()
    SNI string to present to the server during TLS handshake.
    String
    getSubjectAltNames(int index)
    A list of alternate names to verify the subject identity in the certificate.
    com.google.protobuf.ByteString
    getSubjectAltNamesBytes(int index)
    A list of alternate names to verify the subject identity in the certificate.
    int
    getSubjectAltNamesCount()
    A list of alternate names to verify the subject identity in the certificate.
    List<String>
    getSubjectAltNamesList()
    A list of alternate names to verify the subject identity in the certificate.

    从接口继承的方法 com.google.protobuf.MessageLiteOrBuilder

    isInitialized

    从接口继承的方法 com.google.protobuf.MessageOrBuilder

    findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

  • 方法详细资料

    • getModeValue

      int getModeValue()
       Indicates whether connections to this port should be secured
 using TLS. The value of this field determines how TLS is enforced.
      .istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];
      返回:
      The enum numeric value on the wire for mode.

    • getMode

      DestinationRuleOuterClass.ClientTLSSettings.TLSmode getMode()
       Indicates whether connections to this port should be secured
 using TLS. The value of this field determines how TLS is enforced.
      .istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];
      返回:
      The mode.

    • getClientCertificate

      String getClientCertificate()
       REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client-side TLS certificate to use.
 Should be empty if mode is `ISTIO_MUTUAL`.
      string client_certificate = 2;
      返回:
      The clientCertificate.

    • getClientCertificateBytes

      com.google.protobuf.ByteString getClientCertificateBytes()
       REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client-side TLS certificate to use.
 Should be empty if mode is `ISTIO_MUTUAL`.
      string client_certificate = 2;
      返回:
      The bytes for clientCertificate.

    • getPrivateKey

      String getPrivateKey()
       REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client's private key.
 Should be empty if mode is `ISTIO_MUTUAL`.
      string private_key = 3;
      返回:
      The privateKey.

    • getPrivateKeyBytes

      com.google.protobuf.ByteString getPrivateKeyBytes()
       REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client's private key.
 Should be empty if mode is `ISTIO_MUTUAL`.
      string private_key = 3;
      返回:
      The bytes for privateKey.

    • getCaCertificates

      String getCaCertificates()
       OPTIONAL: The path to the file containing certificate authority
 certificates to use in verifying a presented server certificate. If
 omitted, the proxy will not verify the server's certificate.
 Should be empty if mode is `ISTIO_MUTUAL`.
      string ca_certificates = 4;
      返回:
      The caCertificates.

    • getCaCertificatesBytes

      com.google.protobuf.ByteString getCaCertificatesBytes()
       OPTIONAL: The path to the file containing certificate authority
 certificates to use in verifying a presented server certificate. If
 omitted, the proxy will not verify the server's certificate.
 Should be empty if mode is `ISTIO_MUTUAL`.
      string ca_certificates = 4;
      返回:
      The bytes for caCertificates.

    • getCredentialName

      String getCredentialName()
       The name of the secret that holds the TLS certs for the
 client including the CA certificates. Secret must exist in the
 same namespace with the proxy using the certificates.
 The secret (of type `generic`)should contain the
 following keys and values: `key: <privateKey>`,
 `cert: <serverCert>`, `cacert: <CACertificate>`.
 Secret of type tls for client certificates along with
 ca.crt key for CA certificates is also supported.
 Only one of client certificates and CA certificate
 or credentialName can be specified.

 **NOTE:** This field is currently applicable only at gateways.
 Sidecars will continue to use the certificate paths.
      string credential_name = 7;
      返回:
      The credentialName.

    • getCredentialNameBytes

      com.google.protobuf.ByteString getCredentialNameBytes()
       The name of the secret that holds the TLS certs for the
 client including the CA certificates. Secret must exist in the
 same namespace with the proxy using the certificates.
 The secret (of type `generic`)should contain the
 following keys and values: `key: <privateKey>`,
 `cert: <serverCert>`, `cacert: <CACertificate>`.
 Secret of type tls for client certificates along with
 ca.crt key for CA certificates is also supported.
 Only one of client certificates and CA certificate
 or credentialName can be specified.

 **NOTE:** This field is currently applicable only at gateways.
 Sidecars will continue to use the certificate paths.
      string credential_name = 7;
      返回:
      The bytes for credentialName.

    • getSubjectAltNamesList

      List<String> getSubjectAltNamesList()
       A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
      repeated string subject_alt_names = 5;
      返回:
      A list containing the subjectAltNames.

    • getSubjectAltNamesCount

      int getSubjectAltNamesCount()
       A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
      repeated string subject_alt_names = 5;
      返回:
      The count of subjectAltNames.

    • getSubjectAltNames

      String getSubjectAltNames(int index)
       A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
      repeated string subject_alt_names = 5;
      参数:
      index - The index of the element to return.
      返回:
      The subjectAltNames at the given index.

    • getSubjectAltNamesBytes

      com.google.protobuf.ByteString getSubjectAltNamesBytes(int index)
       A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
      repeated string subject_alt_names = 5;
      参数:
      index - The index of the value to return.
      返回:
      The bytes of the subjectAltNames at the given index.

    • getSni

      String getSni()
       SNI string to present to the server during TLS handshake.
      string sni = 6;
      返回:
      The sni.

    • getSniBytes

      com.google.protobuf.ByteString getSniBytes()
       SNI string to present to the server during TLS handshake.
      string sni = 6;
      返回:
      The bytes for sni.