istio.networking.v1alpha3

接口 DestinationRuleOuterClass.ClientTLSSettingsOrBuilder

所有超级接口:

com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder

所有已知实现类:

DestinationRuleOuterClass.ClientTLSSettings, DestinationRuleOuterClass.ClientTLSSettings.Builder

封闭类:

DestinationRuleOuterClass

public static interface DestinationRuleOuterClass.ClientTLSSettingsOrBuilder
extends com.google.protobuf.MessageOrBuilder

方法概要

限定符和类型	方法和说明
String	getCaCertificates() OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.
com.google.protobuf.ByteString	getCaCertificatesBytes() OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.
String	getClientCertificate() REQUIRED if mode is `MUTUAL`.
com.google.protobuf.ByteString	getClientCertificateBytes() REQUIRED if mode is `MUTUAL`.
String	getCredentialName() The name of the secret that holds the TLS certs for the client including the CA certificates.
com.google.protobuf.ByteString	getCredentialNameBytes() The name of the secret that holds the TLS certs for the client including the CA certificates.
DestinationRuleOuterClass.ClientTLSSettings.TLSmode	getMode() Indicates whether connections to this port should be secured using TLS.
int	getModeValue() Indicates whether connections to this port should be secured using TLS.
String	getPrivateKey() REQUIRED if mode is `MUTUAL`.
com.google.protobuf.ByteString	getPrivateKeyBytes() REQUIRED if mode is `MUTUAL`.
String	getSni() SNI string to present to the server during TLS handshake.
com.google.protobuf.ByteString	getSniBytes() SNI string to present to the server during TLS handshake.
String	getSubjectAltNames(int index) A list of alternate names to verify the subject identity in the certificate.
com.google.protobuf.ByteString	getSubjectAltNamesBytes(int index) A list of alternate names to verify the subject identity in the certificate.
int	getSubjectAltNamesCount() A list of alternate names to verify the subject identity in the certificate.
List<String>	getSubjectAltNamesList() A list of alternate names to verify the subject identity in the certificate.

从接口继承的方法 com.google.protobuf.MessageOrBuilder

findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

从接口继承的方法 com.google.protobuf.MessageLiteOrBuilder

isInitialized

方法详细资料

getModeValue

int getModeValue()

 Indicates whether connections to this port should be secured
 using TLS. The value of this field determines how TLS is enforced.
 

.istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];

返回:

The enum numeric value on the wire for mode.

getMode

DestinationRuleOuterClass.ClientTLSSettings.TLSmode getMode()

 Indicates whether connections to this port should be secured
 using TLS. The value of this field determines how TLS is enforced.
 

.istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];

返回:

The mode.

getClientCertificate

String getClientCertificate()

 REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client-side TLS certificate to use.
 Should be empty if mode is `ISTIO_MUTUAL`.
 

string client_certificate = 2;

返回:

The clientCertificate.

getClientCertificateBytes

com.google.protobuf.ByteString getClientCertificateBytes()

 REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client-side TLS certificate to use.
 Should be empty if mode is `ISTIO_MUTUAL`.
 

string client_certificate = 2;

返回:

The bytes for clientCertificate.

getPrivateKey

String getPrivateKey()

 REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client's private key.
 Should be empty if mode is `ISTIO_MUTUAL`.
 

string private_key = 3;

返回:

The privateKey.

getPrivateKeyBytes

com.google.protobuf.ByteString getPrivateKeyBytes()

 REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client's private key.
 Should be empty if mode is `ISTIO_MUTUAL`.
 

string private_key = 3;

返回:

The bytes for privateKey.

getCaCertificates

String getCaCertificates()

 OPTIONAL: The path to the file containing certificate authority
 certificates to use in verifying a presented server certificate. If
 omitted, the proxy will not verify the server's certificate.
 Should be empty if mode is `ISTIO_MUTUAL`.
 

string ca_certificates = 4;

返回:

The caCertificates.

getCaCertificatesBytes

com.google.protobuf.ByteString getCaCertificatesBytes()

 OPTIONAL: The path to the file containing certificate authority
 certificates to use in verifying a presented server certificate. If
 omitted, the proxy will not verify the server's certificate.
 Should be empty if mode is `ISTIO_MUTUAL`.
 

string ca_certificates = 4;

返回:

The bytes for caCertificates.

getCredentialName

String getCredentialName()

 The name of the secret that holds the TLS certs for the
 client including the CA certificates. Secret must exist in the
 same namespace with the proxy using the certificates.
 The secret (of type `generic`)should contain the
 following keys and values: `key: <privateKey>`,
 `cert: <serverCert>`, `cacert: <CACertificate>`.
 Secret of type tls for client certificates along with
 ca.crt key for CA certificates is also supported.
 Only one of client certificates and CA certificate
 or credentialName can be specified.
 **NOTE:** This field is currently applicable only at gateways.
 Sidecars will continue to use the certificate paths.
 

string credential_name = 7;

返回:

The credentialName.

getCredentialNameBytes

com.google.protobuf.ByteString getCredentialNameBytes()

 The name of the secret that holds the TLS certs for the
 client including the CA certificates. Secret must exist in the
 same namespace with the proxy using the certificates.
 The secret (of type `generic`)should contain the
 following keys and values: `key: <privateKey>`,
 `cert: <serverCert>`, `cacert: <CACertificate>`.
 Secret of type tls for client certificates along with
 ca.crt key for CA certificates is also supported.
 Only one of client certificates and CA certificate
 or credentialName can be specified.
 **NOTE:** This field is currently applicable only at gateways.
 Sidecars will continue to use the certificate paths.
 

string credential_name = 7;

返回:

The bytes for credentialName.

getSubjectAltNamesList

List<String> getSubjectAltNamesList()

 A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
 

repeated string subject_alt_names = 5;

返回:

A list containing the subjectAltNames.

getSubjectAltNamesCount

int getSubjectAltNamesCount()

 A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
 

repeated string subject_alt_names = 5;

返回:

The count of subjectAltNames.

getSubjectAltNames

String getSubjectAltNames(int index)

 A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
 

repeated string subject_alt_names = 5;

参数:

index - The index of the element to return.

返回:

The subjectAltNames at the given index.

getSubjectAltNamesBytes

com.google.protobuf.ByteString getSubjectAltNamesBytes(int index)

 A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
 

repeated string subject_alt_names = 5;

参数:

index - The index of the value to return.

返回:

The bytes of the subjectAltNames at the given index.

getSni

String getSni()

 SNI string to present to the server during TLS handshake.
 

string sni = 6;

返回:

The sni.

getSniBytes

com.google.protobuf.ByteString getSniBytes()

 SNI string to present to the server during TLS handshake.
 

string sni = 6;

返回:

The bytes for sni.