程序包 istio.networking.v1alpha3

接口 DestinationRuleOuterClass.ClientTLSSettingsOrBuilder

    • 方法概要

      所有方法 实例方法 抽象方法 
      修饰符和类型 方法 说明
      java.lang.String getCaCertificates()
      OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.
      com.google.protobuf.ByteString getCaCertificatesBytes()
      OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.
      java.lang.String getClientCertificate()
      REQUIRED if mode is `MUTUAL`.
      com.google.protobuf.ByteString getClientCertificateBytes()
      REQUIRED if mode is `MUTUAL`.
      java.lang.String getCredentialName()
      The name of the secret that holds the TLS certs for the client including the CA certificates.
      com.google.protobuf.ByteString getCredentialNameBytes()
      The name of the secret that holds the TLS certs for the client including the CA certificates.
      DestinationRuleOuterClass.ClientTLSSettings.TLSmode getMode()
      Indicates whether connections to this port should be secured using TLS.
      int getModeValue()
      Indicates whether connections to this port should be secured using TLS.
      java.lang.String getPrivateKey()
      REQUIRED if mode is `MUTUAL`.
      com.google.protobuf.ByteString getPrivateKeyBytes()
      REQUIRED if mode is `MUTUAL`.
      java.lang.String getSni()
      SNI string to present to the server during TLS handshake.
      com.google.protobuf.ByteString getSniBytes()
      SNI string to present to the server during TLS handshake.
      java.lang.String getSubjectAltNames​(int index)
      A list of alternate names to verify the subject identity in the certificate.
      com.google.protobuf.ByteString getSubjectAltNamesBytes​(int index)
      A list of alternate names to verify the subject identity in the certificate.
      int getSubjectAltNamesCount()
      A list of alternate names to verify the subject identity in the certificate.
      java.util.List<java.lang.String> getSubjectAltNamesList()
      A list of alternate names to verify the subject identity in the certificate.

      • 从接口继承的方法 com.google.protobuf.MessageLiteOrBuilder

        isInitialized

      • 从接口继承的方法 com.google.protobuf.MessageOrBuilder

        findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof

    • 方法详细资料

      • getModeValue

        int getModeValue()
         Indicates whether connections to this port should be secured
 using TLS. The value of this field determines how TLS is enforced.
        .istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];
        返回:
        The enum numeric value on the wire for mode.

      • getMode

        DestinationRuleOuterClass.ClientTLSSettings.TLSmode getMode()
         Indicates whether connections to this port should be secured
 using TLS. The value of this field determines how TLS is enforced.
        .istio.networking.v1alpha3.ClientTLSSettings.TLSmode mode = 1 [(.google.api.field_behavior) = REQUIRED];
        返回:
        The mode.

      • getClientCertificate

        java.lang.String getClientCertificate()
         REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client-side TLS certificate to use.
 Should be empty if mode is `ISTIO_MUTUAL`.
        string client_certificate = 2;
        返回:
        The clientCertificate.

      • getClientCertificateBytes

        com.google.protobuf.ByteString getClientCertificateBytes()
         REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client-side TLS certificate to use.
 Should be empty if mode is `ISTIO_MUTUAL`.
        string client_certificate = 2;
        返回:
        The bytes for clientCertificate.

      • getPrivateKey

        java.lang.String getPrivateKey()
         REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client's private key.
 Should be empty if mode is `ISTIO_MUTUAL`.
        string private_key = 3;
        返回:
        The privateKey.

      • getPrivateKeyBytes

        com.google.protobuf.ByteString getPrivateKeyBytes()
         REQUIRED if mode is `MUTUAL`. The path to the file holding the
 client's private key.
 Should be empty if mode is `ISTIO_MUTUAL`.
        string private_key = 3;
        返回:
        The bytes for privateKey.

      • getCaCertificates

        java.lang.String getCaCertificates()
         OPTIONAL: The path to the file containing certificate authority
 certificates to use in verifying a presented server certificate. If
 omitted, the proxy will not verify the server's certificate.
 Should be empty if mode is `ISTIO_MUTUAL`.
        string ca_certificates = 4;
        返回:
        The caCertificates.

      • getCaCertificatesBytes

        com.google.protobuf.ByteString getCaCertificatesBytes()
         OPTIONAL: The path to the file containing certificate authority
 certificates to use in verifying a presented server certificate. If
 omitted, the proxy will not verify the server's certificate.
 Should be empty if mode is `ISTIO_MUTUAL`.
        string ca_certificates = 4;
        返回:
        The bytes for caCertificates.

      • getCredentialName

        java.lang.String getCredentialName()
         The name of the secret that holds the TLS certs for the
 client including the CA certificates. Secret must exist in the
 same namespace with the proxy using the certificates.
 The secret (of type `generic`)should contain the
 following keys and values: `key: <privateKey>`,
 `cert: <serverCert>`, `cacert: <CACertificate>`.
 Secret of type tls for client certificates along with
 ca.crt key for CA certificates is also supported.
 Only one of client certificates and CA certificate
 or credentialName can be specified.
 **NOTE:** This field is currently applicable only at gateways.
 Sidecars will continue to use the certificate paths.
        string credential_name = 7;
        返回:
        The credentialName.

      • getCredentialNameBytes

        com.google.protobuf.ByteString getCredentialNameBytes()
         The name of the secret that holds the TLS certs for the
 client including the CA certificates. Secret must exist in the
 same namespace with the proxy using the certificates.
 The secret (of type `generic`)should contain the
 following keys and values: `key: <privateKey>`,
 `cert: <serverCert>`, `cacert: <CACertificate>`.
 Secret of type tls for client certificates along with
 ca.crt key for CA certificates is also supported.
 Only one of client certificates and CA certificate
 or credentialName can be specified.
 **NOTE:** This field is currently applicable only at gateways.
 Sidecars will continue to use the certificate paths.
        string credential_name = 7;
        返回:
        The bytes for credentialName.

      • getSubjectAltNamesList

        java.util.List<java.lang.String> getSubjectAltNamesList()
         A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
        repeated string subject_alt_names = 5;
        返回:
        A list containing the subjectAltNames.

      • getSubjectAltNamesCount

        int getSubjectAltNamesCount()
         A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
        repeated string subject_alt_names = 5;
        返回:
        The count of subjectAltNames.

      • getSubjectAltNames

        java.lang.String getSubjectAltNames​(int index)
         A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
        repeated string subject_alt_names = 5;
        参数:
        index - The index of the element to return.
        返回:
        The subjectAltNames at the given index.

      • getSubjectAltNamesBytes

        com.google.protobuf.ByteString getSubjectAltNamesBytes​(int index)
         A list of alternate names to verify the subject identity in the
 certificate. If specified, the proxy will verify that the server
 certificate's subject alt name matches one of the specified values.
 If specified, this list overrides the value of subject_alt_names
 from the ServiceEntry.
        repeated string subject_alt_names = 5;
        参数:
        index - The index of the value to return.
        返回:
        The bytes of the subjectAltNames at the given index.

      • getSni

        java.lang.String getSni()
         SNI string to present to the server during TLS handshake.
        string sni = 6;
        返回:
        The sni.

      • getSniBytes

        com.google.protobuf.ByteString getSniBytes()
         SNI string to present to the server during TLS handshake.
        string sni = 6;
        返回:
        The bytes for sni.