@@ -127,12 +127,6 @@ examples:
127
127
default_neg_name : ' network-endpoint'
128
128
health_check_name : ' health-check'
129
129
network_name : ' network'
130
- - name : ' backend_service_tls_settings'
131
- primary_resource_id : ' default'
132
- vars :
133
- backend_service_name : ' backend-service'
134
- health_check_name : ' health-check'
135
- authentication_name : ' authentication'
136
130
parameters :
137
131
properties :
138
132
- name : ' affinityCookieTtlSec'
@@ -1472,44 +1466,3 @@ properties:
1472
1466
description : |
1473
1467
URL to networkservices.ServiceLbPolicy resource.
1474
1468
Can only be set if load balancing scheme is EXTERNAL, EXTERNAL_MANAGED, INTERNAL_MANAGED or INTERNAL_SELF_MANAGED and the scope is global.
1475
- - name : ' tlsSettings'
1476
- type : NestedObject
1477
- description : |
1478
- Configuration for Backend Authenticated TLS and mTLS. May only be specified when the backend protocol is SSL, HTTPS or HTTP2.
1479
- properties :
1480
- - name : ' sni'
1481
- type : String
1482
- description : |
1483
- Server Name Indication - see RFC3546 section 3.1. If set, the load balancer sends this string as the SNI hostname in the
1484
- TLS connection to the backend, and requires that this string match a Subject Alternative Name (SAN) in the backend's
1485
- server certificate. With a Regional Internet NEG backend, if the SNI is specified here, the load balancer uses it
1486
- regardless of whether the Regional Internet NEG is specified with FQDN or IP address and port.
1487
- - name : ' subjectAltNames'
1488
- type : Array
1489
- description : |
1490
- A list of Subject Alternative Names (SANs) that the Load Balancer verifies during a TLS handshake with the backend.
1491
- When the server presents its X.509 certificate to the Load Balancer, the Load Balancer inspects the certificate's SAN field,
1492
- and requires that at least one SAN match one of the subjectAltNames in the list. This field is limited to 5 entries.
1493
- When both sni and subjectAltNames are specified, the load balancer matches the backend certificate's SAN only to
1494
- subjectAltNames.
1495
- item_type :
1496
- type : NestedObject
1497
- properties :
1498
- - name : ' dnsName'
1499
- type : String
1500
- description : The SAN specified as a DNS Name.
1501
- exactly_one_of :
1502
- - tlsSettings.0.uniform_resource_identifier
1503
- - tlsSettings.0.dns_name
1504
- - name : ' uniformResourceIdentifier'
1505
- type : String
1506
- description : The SAN specified as a URI.
1507
- exactly_one_of :
1508
- - tlsSettings.0.uniform_resource_identifier
1509
- - tlsSettings.0.dns_name
1510
- - name : ' authenticationConfig'
1511
- type : String
1512
- description : |
1513
- Reference to the BackendAuthenticationConfig resource from the networksecurity.googleapis.com namespace.
1514
- Can be used in authenticating TLS connections to the backend, as specified by the authenticationMode field.
1515
- Can only be specified if authenticationMode is not NONE.
0 commit comments