public sealed class MeshCertificates : IMessage<MeshCertificates>, IEquatable<MeshCertificates>, IDeepCloneable<MeshCertificates>, IBufferMessage, IMessage
Reference documentation and code samples for the Google Kubernetes Engine v1 API class MeshCertificates.
Configuration for issuance of mTLS keys and certificates to Kubernetes pods.
enable_certificates controls issuance of workload mTLS certificates.
If set, the GKE Workload Identity Certificates controller and node agent
will be deployed in the cluster, which can then be configured by creating a
WorkloadCertificateConfig Custom Resource.
Requires Workload Identity
([workload_pool][google.container.v1.WorkloadIdentityConfig.workload_pool]
must be non-empty).
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["\u003cp\u003eThe latest version of the Google.Cloud.Container.V1 MeshCertificates is 3.33.0, with numerous prior versions available for review, all the way back to version 2.3.0.\u003c/p\u003e\n"],["\u003cp\u003eThe MeshCertificates class in the Google Kubernetes Engine v1 API is used to configure the issuance of mTLS keys and certificates to Kubernetes pods.\u003c/p\u003e\n"],["\u003cp\u003eMeshCertificates implements several interfaces, including IMessage, IEquatable, IDeepCloneable, and IBufferMessage.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eEnableCertificates\u003c/code\u003e property of MeshCertificates, a boolean, controls the issuance of workload mTLS certificates, requiring Workload Identity to be enabled.\u003c/p\u003e\n"]]],[],null,[]]
