Reference documentation and code samples for the Network Security V1beta1 API class Google::Cloud::NetworkSecurity::V1beta1::ServerTlsPolicy.
ServerTlsPolicy is a resource that specifies how a server should authenticate incoming requests. This resource itself does not affect configuration unless it is attached to a target https proxy or endpoint config selector resource.
Inherits
- Object
Extended By
- Google::Protobuf::MessageExts::ClassMethods
Includes
- Google::Protobuf::MessageExts
Methods
#allow_open
def allow_open() -> ::Boolean
-
(::Boolean) — Determines if server allows plaintext connections. If set to true, server
allows plain text connections. By default, it is set to false. This setting
is not exclusive of other encryption modes. For example, if
allow_open
andmtls_policy
are set, server allows both plain text and mTLS connections. See documentation of other encryption modes to confirm compatibility.Consider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80.
#allow_open=
def allow_open=(value) -> ::Boolean
-
value (::Boolean) — Determines if server allows plaintext connections. If set to true, server
allows plain text connections. By default, it is set to false. This setting
is not exclusive of other encryption modes. For example, if
allow_open
andmtls_policy
are set, server allows both plain text and mTLS connections. See documentation of other encryption modes to confirm compatibility.Consider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80.
-
(::Boolean) — Determines if server allows plaintext connections. If set to true, server
allows plain text connections. By default, it is set to false. This setting
is not exclusive of other encryption modes. For example, if
allow_open
andmtls_policy
are set, server allows both plain text and mTLS connections. See documentation of other encryption modes to confirm compatibility.Consider using it if you wish to upgrade in place your deployment to TLS while having mixed TLS and non-TLS traffic reaching port :80.
#create_time
def create_time() -> ::Google::Protobuf::Timestamp
- (::Google::Protobuf::Timestamp) — Output only. The timestamp when the resource was created.
#description
def description() -> ::String
- (::String) — Free-text description of the resource.
#description=
def description=(value) -> ::String
- value (::String) — Free-text description of the resource.
- (::String) — Free-text description of the resource.
#labels
def labels() -> ::Google::Protobuf::Map{::String => ::String}
- (::Google::Protobuf::Map{::String => ::String}) — Set of label tags associated with the resource.
#labels=
def labels=(value) -> ::Google::Protobuf::Map{::String => ::String}
- value (::Google::Protobuf::Map{::String => ::String}) — Set of label tags associated with the resource.
- (::Google::Protobuf::Map{::String => ::String}) — Set of label tags associated with the resource.
#mtls_policy
def mtls_policy() -> ::Google::Cloud::NetworkSecurity::V1beta1::ServerTlsPolicy::MTLSPolicy
-
(::Google::Cloud::NetworkSecurity::V1beta1::ServerTlsPolicy::MTLSPolicy) — Defines a mechanism to provision peer validation certificates for peer to
peer authentication (Mutual TLS - mTLS). If not specified, client
certificate will not be requested. The connection is treated as TLS and not
mTLS. If
allow_open
andmtls_policy
are set, server allows both plain text and mTLS connections.
#mtls_policy=
def mtls_policy=(value) -> ::Google::Cloud::NetworkSecurity::V1beta1::ServerTlsPolicy::MTLSPolicy
-
value (::Google::Cloud::NetworkSecurity::V1beta1::ServerTlsPolicy::MTLSPolicy) — Defines a mechanism to provision peer validation certificates for peer to
peer authentication (Mutual TLS - mTLS). If not specified, client
certificate will not be requested. The connection is treated as TLS and not
mTLS. If
allow_open
andmtls_policy
are set, server allows both plain text and mTLS connections.
-
(::Google::Cloud::NetworkSecurity::V1beta1::ServerTlsPolicy::MTLSPolicy) — Defines a mechanism to provision peer validation certificates for peer to
peer authentication (Mutual TLS - mTLS). If not specified, client
certificate will not be requested. The connection is treated as TLS and not
mTLS. If
allow_open
andmtls_policy
are set, server allows both plain text and mTLS connections.
#name
def name() -> ::String
-
(::String) — Required. Name of the ServerTlsPolicy resource. It matches the pattern
projects/*/locations/{location}/serverTlsPolicies/{server_tls_policy}
#name=
def name=(value) -> ::String
-
value (::String) — Required. Name of the ServerTlsPolicy resource. It matches the pattern
projects/*/locations/{location}/serverTlsPolicies/{server_tls_policy}
-
(::String) — Required. Name of the ServerTlsPolicy resource. It matches the pattern
projects/*/locations/{location}/serverTlsPolicies/{server_tls_policy}
#server_certificate
def server_certificate() -> ::Google::Cloud::NetworkSecurity::V1beta1::CertificateProvider
-
(::Google::Cloud::NetworkSecurity::V1beta1::CertificateProvider) — Defines a mechanism to provision server identity (public and private keys).
Cannot be combined with
allow_open
as a permissive mode that allows both plain text and TLS is not supported.
#server_certificate=
def server_certificate=(value) -> ::Google::Cloud::NetworkSecurity::V1beta1::CertificateProvider
-
value (::Google::Cloud::NetworkSecurity::V1beta1::CertificateProvider) — Defines a mechanism to provision server identity (public and private keys).
Cannot be combined with
allow_open
as a permissive mode that allows both plain text and TLS is not supported.
-
(::Google::Cloud::NetworkSecurity::V1beta1::CertificateProvider) — Defines a mechanism to provision server identity (public and private keys).
Cannot be combined with
allow_open
as a permissive mode that allows both plain text and TLS is not supported.
#update_time
def update_time() -> ::Google::Protobuf::Timestamp
- (::Google::Protobuf::Timestamp) — Output only. The timestamp when the resource was updated.