#[non_exhaustive]pub struct SecuritySettings {
pub aws_v_4_authentication: Option<AWSV4Signature>,
pub client_tls_policy: Option<String>,
pub subject_alt_names: Vec<String>,
/* private fields */
}backend-services or region-backend-services only.Expand description
The authentication and authorization settings for a BackendService.
Fields (Non-exhaustive)§
This struct is marked as non-exhaustive
Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.aws_v_4_authentication: Option<AWSV4Signature>The configuration needed to generate a signature for access to private storage buckets that support AWS’s Signature Version 4 for authentication. Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
client_tls_policy: Option<String>Optional. A URL referring to a networksecurity.ClientTlsPolicy resource that describes how clients should authenticate with this service’s backends.
clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set to INTERNAL_SELF_MANAGED.
If left blank, communications are not encrypted.
subject_alt_names: Vec<String>Optional. A list of Subject Alternative Names (SANs) that the client verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate to the client, the client inspects the certificate’ssubjectAltName field. If the field contains one of the specified values, the communication continues. Otherwise, it fails. This additional check enables the client to verify that the server is authorized to run the requested service.
Note that the contents of the server certificate’s subjectAltName field are configured by the Public Key Infrastructure which provisions server identities.
Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED. Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS mode).
Implementations§
Source§impl SecuritySettings
impl SecuritySettings
pub fn new() -> Self
Sourcepub fn set_aws_v_4_authentication<T>(self, v: T) -> Selfwhere
T: Into<AWSV4Signature>,
pub fn set_aws_v_4_authentication<T>(self, v: T) -> Selfwhere
T: Into<AWSV4Signature>,
Sets the value of aws_v_4_authentication.
§Example
use google_cloud_compute_v1::model::AWSV4Signature;
let x = SecuritySettings::new().set_aws_v_4_authentication(AWSV4Signature::default()/* use setters */);Sourcepub fn set_or_clear_aws_v_4_authentication<T>(self, v: Option<T>) -> Selfwhere
T: Into<AWSV4Signature>,
pub fn set_or_clear_aws_v_4_authentication<T>(self, v: Option<T>) -> Selfwhere
T: Into<AWSV4Signature>,
Sets or clears the value of aws_v_4_authentication.
§Example
use google_cloud_compute_v1::model::AWSV4Signature;
let x = SecuritySettings::new().set_or_clear_aws_v_4_authentication(Some(AWSV4Signature::default()/* use setters */));
let x = SecuritySettings::new().set_or_clear_aws_v_4_authentication(None::<AWSV4Signature>);Sourcepub fn set_client_tls_policy<T>(self, v: T) -> Self
pub fn set_client_tls_policy<T>(self, v: T) -> Self
Sets the value of client_tls_policy.
§Example
let x = SecuritySettings::new().set_client_tls_policy("example");Sourcepub fn set_or_clear_client_tls_policy<T>(self, v: Option<T>) -> Self
pub fn set_or_clear_client_tls_policy<T>(self, v: Option<T>) -> Self
Sets or clears the value of client_tls_policy.
§Example
let x = SecuritySettings::new().set_or_clear_client_tls_policy(Some("example"));
let x = SecuritySettings::new().set_or_clear_client_tls_policy(None::<String>);Sourcepub fn set_subject_alt_names<T, V>(self, v: T) -> Self
pub fn set_subject_alt_names<T, V>(self, v: T) -> Self
Sets the value of subject_alt_names.
§Example
let x = SecuritySettings::new().set_subject_alt_names(["a", "b", "c"]);Trait Implementations§
Source§impl Clone for SecuritySettings
impl Clone for SecuritySettings
Source§fn clone(&self) -> SecuritySettings
fn clone(&self) -> SecuritySettings
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more