public final class SecuritySettings extends GeneratedMessageV3 implements SecuritySettingsOrBuilder
The authentication and authorization settings for a BackendService.
Protobuf type google.cloud.compute.v1.SecuritySettings
Inherited Members
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT)
com.google.protobuf.GeneratedMessageV3.<ListT>makeMutableCopy(ListT,int)
com.google.protobuf.GeneratedMessageV3.<T>emptyList(java.lang.Class<T>)
com.google.protobuf.GeneratedMessageV3.internalGetMapFieldReflection(int)
Static Fields
AWS_V4_AUTHENTICATION_FIELD_NUMBER
public static final int AWS_V4_AUTHENTICATION_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
CLIENT_TLS_POLICY_FIELD_NUMBER
public static final int CLIENT_TLS_POLICY_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
SUBJECT_ALT_NAMES_FIELD_NUMBER
public static final int SUBJECT_ALT_NAMES_FIELD_NUMBER
| Field Value |
| Type |
Description |
int |
|
Static Methods
getDefaultInstance()
public static SecuritySettings getDefaultInstance()
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
newBuilder()
public static SecuritySettings.Builder newBuilder()
newBuilder(SecuritySettings prototype)
public static SecuritySettings.Builder newBuilder(SecuritySettings prototype)
public static SecuritySettings parseDelimitedFrom(InputStream input)
public static SecuritySettings parseDelimitedFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(byte[] data)
public static SecuritySettings parseFrom(byte[] data)
| Parameter |
| Name |
Description |
data |
byte[]
|
parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
public static SecuritySettings parseFrom(byte[] data, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteString data)
public static SecuritySettings parseFrom(ByteString data)
parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static SecuritySettings parseFrom(ByteString data, ExtensionRegistryLite extensionRegistry)
public static SecuritySettings parseFrom(CodedInputStream input)
public static SecuritySettings parseFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public static SecuritySettings parseFrom(InputStream input)
public static SecuritySettings parseFrom(InputStream input, ExtensionRegistryLite extensionRegistry)
parseFrom(ByteBuffer data)
public static SecuritySettings parseFrom(ByteBuffer data)
parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
public static SecuritySettings parseFrom(ByteBuffer data, ExtensionRegistryLite extensionRegistry)
parser()
public static Parser<SecuritySettings> parser()
Methods
equals(Object obj)
public boolean equals(Object obj)
| Parameter |
| Name |
Description |
obj |
Object
|
Overrides
getAwsV4Authentication()
public AWSV4Signature getAwsV4Authentication()
The configuration needed to generate a signature for access to private
storage buckets that support AWS's Signature Version 4 for authentication.
Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;
getAwsV4AuthenticationOrBuilder()
public AWSV4SignatureOrBuilder getAwsV4AuthenticationOrBuilder()
The configuration needed to generate a signature for access to private
storage buckets that support AWS's Signature Version 4 for authentication.
Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;
getClientTlsPolicy()
public String getClientTlsPolicy()
Optional. A URL referring to a networksecurity.ClientTlsPolicy resource
that describes how clients should authenticate with this service's
backends.
clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set
to INTERNAL_SELF_MANAGED.
If left blank, communications are not encrypted.
optional string client_tls_policy = 462325226;
| Returns |
| Type |
Description |
String |
The clientTlsPolicy.
|
getClientTlsPolicyBytes()
public ByteString getClientTlsPolicyBytes()
Optional. A URL referring to a networksecurity.ClientTlsPolicy resource
that describes how clients should authenticate with this service's
backends.
clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set
to INTERNAL_SELF_MANAGED.
If left blank, communications are not encrypted.
optional string client_tls_policy = 462325226;
| Returns |
| Type |
Description |
ByteString |
The bytes for clientTlsPolicy.
|
getDefaultInstanceForType()
public SecuritySettings getDefaultInstanceForType()
getParserForType()
public Parser<SecuritySettings> getParserForType()
Overrides
getSerializedSize()
public int getSerializedSize()
| Returns |
| Type |
Description |
int |
|
Overrides
getSubjectAltNames(int index)
public String getSubjectAltNames(int index)
Optional. A list of Subject Alternative Names (SANs) that the client
verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
specified values, the communication continues. Otherwise, it fails. This
additional check enables the client to verify that the server is authorized
to run the requested service.
Note that the contents of the server
certificate's subjectAltName field are configured by the
Public Key Infrastructure which provisions server identities.
Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
mode).
repeated string subject_alt_names = 330029535;
| Parameter |
| Name |
Description |
index |
int
The index of the element to return.
|
| Returns |
| Type |
Description |
String |
The subjectAltNames at the given index.
|
getSubjectAltNamesBytes(int index)
public ByteString getSubjectAltNamesBytes(int index)
Optional. A list of Subject Alternative Names (SANs) that the client
verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
specified values, the communication continues. Otherwise, it fails. This
additional check enables the client to verify that the server is authorized
to run the requested service.
Note that the contents of the server
certificate's subjectAltName field are configured by the
Public Key Infrastructure which provisions server identities.
Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
mode).
repeated string subject_alt_names = 330029535;
| Parameter |
| Name |
Description |
index |
int
The index of the value to return.
|
| Returns |
| Type |
Description |
ByteString |
The bytes of the subjectAltNames at the given index.
|
getSubjectAltNamesCount()
public int getSubjectAltNamesCount()
Optional. A list of Subject Alternative Names (SANs) that the client
verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
specified values, the communication continues. Otherwise, it fails. This
additional check enables the client to verify that the server is authorized
to run the requested service.
Note that the contents of the server
certificate's subjectAltName field are configured by the
Public Key Infrastructure which provisions server identities.
Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
mode).
repeated string subject_alt_names = 330029535;
| Returns |
| Type |
Description |
int |
The count of subjectAltNames.
|
getSubjectAltNamesList()
public ProtocolStringList getSubjectAltNamesList()
Optional. A list of Subject Alternative Names (SANs) that the client
verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
specified values, the communication continues. Otherwise, it fails. This
additional check enables the client to verify that the server is authorized
to run the requested service.
Note that the contents of the server
certificate's subjectAltName field are configured by the
Public Key Infrastructure which provisions server identities.
Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
mode).
repeated string subject_alt_names = 330029535;
hasAwsV4Authentication()
public boolean hasAwsV4Authentication()
The configuration needed to generate a signature for access to private
storage buckets that support AWS's Signature Version 4 for authentication.
Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;
| Returns |
| Type |
Description |
boolean |
Whether the awsV4Authentication field is set.
|
hasClientTlsPolicy()
public boolean hasClientTlsPolicy()
Optional. A URL referring to a networksecurity.ClientTlsPolicy resource
that describes how clients should authenticate with this service's
backends.
clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set
to INTERNAL_SELF_MANAGED.
If left blank, communications are not encrypted.
optional string client_tls_policy = 462325226;
| Returns |
| Type |
Description |
boolean |
Whether the clientTlsPolicy field is set.
|
hashCode()
| Returns |
| Type |
Description |
int |
|
Overrides
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Overrides
isInitialized()
public final boolean isInitialized()
Overrides
newBuilderForType()
public SecuritySettings.Builder newBuilderForType()
newBuilderForType(GeneratedMessageV3.BuilderParent parent)
protected SecuritySettings.Builder newBuilderForType(GeneratedMessageV3.BuilderParent parent)
Overrides
newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
protected Object newInstance(GeneratedMessageV3.UnusedPrivateParameter unused)
| Returns |
| Type |
Description |
Object |
|
Overrides
toBuilder()
public SecuritySettings.Builder toBuilder()
writeTo(CodedOutputStream output)
public void writeTo(CodedOutputStream output)
Overrides
