@@ -1481,17 +1481,17 @@ properties:
1481
1481
- name : ' sni'
1482
1482
type : String
1483
1483
description : |
1484
- Server Name Indication - see RFC3546 section 3.1. If set, the load balancer sends this string as the SNI hostname in the
1485
- TLS connection to the backend, and requires that this string match a Subject Alternative Name (SAN) in the backend's
1486
- server certificate. With a Regional Internet NEG backend, if the SNI is specified here, the load balancer uses it
1484
+ Server Name Indication - see RFC3546 section 3.1. If set, the load balancer sends this string as the SNI hostname in the
1485
+ TLS connection to the backend, and requires that this string match a Subject Alternative Name (SAN) in the backend's
1486
+ server certificate. With a Regional Internet NEG backend, if the SNI is specified here, the load balancer uses it
1487
1487
regardless of whether the Regional Internet NEG is specified with FQDN or IP address and port.
1488
1488
- name : ' subjectAltNames'
1489
1489
type : Array
1490
1490
description : |
1491
- A list of Subject Alternative Names (SANs) that the Load Balancer verifies during a TLS handshake with the backend.
1492
- When the server presents its X.509 certificate to the Load Balancer, the Load Balancer inspects the certificate's SAN field,
1493
- and requires that at least one SAN match one of the subjectAltNames in the list. This field is limited to 5 entries.
1494
- When both sni and subjectAltNames are specified, the load balancer matches the backend certificate's SAN only to
1491
+ A list of Subject Alternative Names (SANs) that the Load Balancer verifies during a TLS handshake with the backend.
1492
+ When the server presents its X.509 certificate to the Load Balancer, the Load Balancer inspects the certificate's SAN field,
1493
+ and requires that at least one SAN match one of the subjectAltNames in the list. This field is limited to 5 entries.
1494
+ When both sni and subjectAltNames are specified, the load balancer matches the backend certificate's SAN only to
1495
1495
subjectAltNames.
1496
1496
item_type :
1497
1497
type : NestedObject
@@ -1511,6 +1511,6 @@ properties:
1511
1511
- name : ' authenticationConfig'
1512
1512
type : String
1513
1513
description : |
1514
- Reference to the BackendAuthenticationConfig resource from the networksecurity.googleapis.com namespace.
1515
- Can be used in authenticating TLS connections to the backend, as specified by the authenticationMode field.
1514
+ Reference to the BackendAuthenticationConfig resource from the networksecurity.googleapis.com namespace.
1515
+ Can be used in authenticating TLS connections to the backend, as specified by the authenticationMode field.
1516
1516
Can only be specified if authenticationMode is not NONE.
0 commit comments