Skip to content

Commit 2bbfd98

Browse files
authored
Revert "Add bac to backend service (GoogleCloudPlatform#13213)"
This reverts commit 44c0fbb.
1 parent 62b2cd6 commit 2bbfd98

File tree

2 files changed

+0
-77
lines changed

2 files changed

+0
-77
lines changed

mmv1/products/compute/BackendService.yaml

-47
Original file line numberDiff line numberDiff line change
@@ -127,12 +127,6 @@ examples:
127127
default_neg_name: 'network-endpoint'
128128
health_check_name: 'health-check'
129129
network_name: 'network'
130-
- name: 'backend_service_tls_settings'
131-
primary_resource_id: 'default'
132-
vars:
133-
backend_service_name: 'backend-service'
134-
health_check_name: 'health-check'
135-
authentication_name: 'authentication'
136130
parameters:
137131
properties:
138132
- name: 'affinityCookieTtlSec'
@@ -1472,44 +1466,3 @@ properties:
14721466
description: |
14731467
URL to networkservices.ServiceLbPolicy resource.
14741468
Can only be set if load balancing scheme is EXTERNAL, EXTERNAL_MANAGED, INTERNAL_MANAGED or INTERNAL_SELF_MANAGED and the scope is global.
1475-
- name: 'tlsSettings'
1476-
type: NestedObject
1477-
description: |
1478-
Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2.
1479-
properties:
1480-
- name: 'sni'
1481-
type: String
1482-
description: |
1483-
Server Name Indication - see RFC3546 section 3.1. If set, the load balancer sends this string as the SNI hostname in the
1484-
TLS connection to the backend, and requires that this string match a Subject Alternative Name (SAN) in the backend's
1485-
server certificate. With a Regional Internet NEG backend, if the SNI is specified here, the load balancer uses it
1486-
regardless of whether the Regional Internet NEG is specified with FQDN or IP address and port.
1487-
- name: 'subjectAltNames'
1488-
type: Array
1489-
description: |
1490-
A list of Subject Alternative Names (SANs) that the Load Balancer verifies during a TLS handshake with the backend.
1491-
When the server presents its X.509 certificate to the Load Balancer, the Load Balancer inspects the certificate's SAN field,
1492-
and requires that at least one SAN match one of the subjectAltNames in the list. This field is limited to 5 entries.
1493-
When both sni and subjectAltNames are specified, the load balancer matches the backend certificate's SAN only to
1494-
subjectAltNames.
1495-
item_type:
1496-
type: NestedObject
1497-
properties:
1498-
- name: 'dnsName'
1499-
type: String
1500-
description: The SAN specified as a DNS Name.
1501-
exactly_one_of:
1502-
- tlsSettings.0.uniform_resource_identifier
1503-
- tlsSettings.0.dns_name
1504-
- name: 'uniformResourceIdentifier'
1505-
type: String
1506-
description: The SAN specified as a URI.
1507-
exactly_one_of:
1508-
- tlsSettings.0.uniform_resource_identifier
1509-
- tlsSettings.0.dns_name
1510-
- name: 'authenticationConfig'
1511-
type: String
1512-
description: |
1513-
Reference to the BackendAuthenticationConfig resource from the networksecurity.googleapis.com namespace.
1514-
Can be used in authenticating TLS connections to the backend, as specified by the authenticationMode field.
1515-
Can only be specified if authenticationMode is not NONE.

mmv1/templates/terraform/examples/backend_service_tls_settings.tf.tmpl

-30
This file was deleted.

0 commit comments

Comments
 (0)