Class ClientTLSSettings

Describes the properties of the proxy on a given load balancer port.

Inheritance

object

ClientTLSSettings

Namespace: Neon.Kube.Resources.Istio

Assembly: Neon.Kube.Resources.dll

Syntax

public class ClientTLSSettings

Constructors

ClientTLSSettings()

Initializes a new instance of the ClientTLSSettings class.

Declaration

public ClientTLSSettings()

Properties

InsecureSkipVerify

InsecureSkipVerify specifies whether the proxy should skip verifying the CA signature and SAN for the server certificate corresponding to the host. This flag should only be set if global CA signature verifcation is enabled, VerifyCertAtClient environmental variable is set to true, but no verification is desired for a specific host. If enabled with or without VerifyCertAtClient enabled, verification of the CA signature and SAN will be skipped.

InsecureSkipVerify is false by default. VerifyCertAtClient is false by default in Istio version 1.9 but will be true by default in a later version where, going forward, it will be enabled by default.

Declaration

[JsonProperty(PropertyName = "insecureSkipVerify", Required = Required.Default, DefaultValueHandling = DefaultValueHandling.IgnoreAndPopulate)]
public bool InsecureSkipVerify { get; set; }

Property Value

Type	Description
bool

Mode

Indicates whether connections to this port should be secured using TLS. The value of this field determines how TLS is enforced.

Declaration

[JsonProperty(PropertyName = "mode", Required = Required.Always)]
public TLSMode Mode { get; set; }

Property Value

Type	Description
TLSMode