ServerTlsPolicy(mapping=None, *, ignore_unknown_fields=False, **kwargs)
ServerTlsPolicy is a resource that specifies how a server should authenticate incoming requests. This resource itself does not affect configuration unless it is attached to a target https proxy or endpoint config selector resource.
Attributes |
|
---|---|
Name | Description |
name |
str
Required. Name of the ServerTlsPolicy resource. It matches the pattern projects/*/locations/{location}/serverTlsPolicies/{server_tls_policy}
|
description |
str
Free-text description of the resource. |
create_time |
google.protobuf.timestamp_pb2.Timestamp
Output only. The timestamp when the resource was created. |
update_time |
google.protobuf.timestamp_pb2.Timestamp
Output only. The timestamp when the resource was updated. |
labels |
MutableMapping[str, str]
Set of label tags associated with the resource. |
allow_open |
bool
Determines if server allows plaintext connections. If set to true, server allows plain text connections. By default, it is set to false. This setting is not exclusive of other encryption modes. For example, if allow_open and
mtls_policy are set, server allows both plain text and
mTLS connections. See documentation of other encryption
modes to confirm compatibility.
Consider using it if you wish to upgrade in place your
deployment to TLS while having mixed TLS and non-TLS traffic
reaching port :80.
|
server_certificate |
google.cloud.network_security_v1beta1.types.CertificateProvider
Defines a mechanism to provision server identity (public and private keys). Cannot be combined with allow_open as a
permissive mode that allows both plain text and TLS is not
supported.
|
mtls_policy |
google.cloud.network_security_v1beta1.types.ServerTlsPolicy.MTLSPolicy
Defines a mechanism to provision peer validation certificates for peer to peer authentication (Mutual TLS - mTLS). If not specified, client certificate will not be requested. The connection is treated as TLS and not mTLS. If allow_open and mtls_policy are set, server allows
both plain text and mTLS connections.
|
Classes
LabelsEntry
LabelsEntry(mapping=None, *, ignore_unknown_fields=False, **kwargs)
The abstract base class for a message.
Parameters | |
---|---|
Name | Description |
kwargs |
dict
Keys and values corresponding to the fields of the message. |
mapping |
Union[dict,
A dictionary or message to be used to determine the values for this message. |
ignore_unknown_fields |
Optional(bool)
If True, do not raise errors for unknown fields. Only applied if |
MTLSPolicy
MTLSPolicy(mapping=None, *, ignore_unknown_fields=False, **kwargs)
Specification of the MTLSPolicy.