pub struct BackendTLSPolicySpec {
pub options: Option<BTreeMap<String, String>>,
pub target_refs: Vec<BackendTLSPolicyTargetRefs>,
pub validation: BackendTLSPolicyValidation,
}Expand description
Spec defines the desired state of BackendTLSPolicy.
Fields§
§options: Option<BTreeMap<String, String>>Options are a list of key/value pairs to enable extended TLS configuration for each implementation. For example, configuring the minimum TLS version or supported cipher suites.
A set of common keys MAY be defined by the API in the future. To avoid
any ambiguity, implementation-specific definitions MUST use
domain-prefixed names, such as example.com/my-custom-option.
Un-prefixed names are reserved for key names defined by Gateway API.
Support: Implementation-specific
target_refs: Vec<BackendTLSPolicyTargetRefs>TargetRefs identifies an API object to apply the policy to. Only Services have Extended support. Implementations MAY support additional objects, with Implementation Specific support. Note that this config applies to the entire referenced resource by default, but this default may change in the future to provide a more granular application of the policy.
TargetRefs must be distinct. This means either that:
- They select different targets. If this is the case, then targetRef
entries are distinct. In terms of fields, this means that the
multi-part key defined by
group,kind, andnamemust be unique across all targetRef entries in the BackendTLSPolicy. - They select different sectionNames in the same target.
When more than one BackendTLSPolicy selects the same target and sectionName, implementations MUST determine precedence using the following criteria, continuing on ties:
- The older policy by creation timestamp takes precedence. For example, a policy with a creation timestamp of “2021-07-15 01:02:03” MUST be given precedence over a policy with a creation timestamp of “2021-07-15 01:02:04”.
- The policy appearing first in alphabetical order by {name}.
For example, a policy named
baris given precedence over a policy namedbaz.
For any BackendTLSPolicy that does not take precedence, the
implementation MUST ensure the Accepted Condition is set to
status: False, with Reason Conflicted.
Support: Extended for Kubernetes Service
Support: Implementation-specific for any other resource
validation: BackendTLSPolicyValidationValidation contains backend TLS validation configuration.
Trait Implementations§
Source§impl Clone for BackendTLSPolicySpec
impl Clone for BackendTLSPolicySpec
Source§fn clone(&self) -> BackendTLSPolicySpec
fn clone(&self) -> BackendTLSPolicySpec
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Debug for BackendTLSPolicySpec
impl Debug for BackendTLSPolicySpec
Source§impl Default for BackendTLSPolicySpec
impl Default for BackendTLSPolicySpec
Source§fn default() -> BackendTLSPolicySpec
fn default() -> BackendTLSPolicySpec
Source§impl<'de> Deserialize<'de> for BackendTLSPolicySpec
impl<'de> Deserialize<'de> for BackendTLSPolicySpec
Source§fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>where
__D: Deserializer<'de>,
Source§impl JsonSchema for BackendTLSPolicySpec
impl JsonSchema for BackendTLSPolicySpec
Source§fn schema_id() -> Cow<'static, str>
fn schema_id() -> Cow<'static, str>
Source§fn json_schema(generator: &mut SchemaGenerator) -> Schema
fn json_schema(generator: &mut SchemaGenerator) -> Schema
Source§fn inline_schema() -> bool
fn inline_schema() -> bool
$ref keyword. Read moreSource§impl PartialEq for BackendTLSPolicySpec
impl PartialEq for BackendTLSPolicySpec
Source§impl Serialize for BackendTLSPolicySpec
impl Serialize for BackendTLSPolicySpec
impl StructuralPartialEq for BackendTLSPolicySpec
Auto Trait Implementations§
impl Freeze for BackendTLSPolicySpec
impl RefUnwindSafe for BackendTLSPolicySpec
impl Send for BackendTLSPolicySpec
impl Sync for BackendTLSPolicySpec
impl Unpin for BackendTLSPolicySpec
impl UnwindSafe for BackendTLSPolicySpec
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
Source§fn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self>
fn into_either(self, into_left: bool) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more