Optional. A list of rules for mapping from SSL principal names to
short names. These are applied in order by Kafka.
Refer to the Apache Kafka documentation for ssl.principal.mapping.rules
for the precise formatting details and syntax.
Example: "RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT"
This is a static Kafka broker configuration. Setting or modifying this
field will trigger a rolling restart of the Kafka brokers to apply
the change. An empty string means no rules are applied (Kafka default).
Optional. A list of rules for mapping from SSL principal names to
short names. These are applied in order by Kafka.
Refer to the Apache Kafka documentation for ssl.principal.mapping.rules
for the precise formatting details and syntax.
Example: "RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT"
This is a static Kafka broker configuration. Setting or modifying this
field will trigger a rolling restart of the Kafka brokers to apply
the change. An empty string means no rules are applied (Kafka default).
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-28 UTC."],[],[],null,["# Interface TlsConfigOrBuilder (0.28.0)\n\nVersion latestkeyboard_arrow_down\n\n- [0.28.0 (latest)](/java/docs/reference/google-cloud-managedkafka/latest/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.26.0](/java/docs/reference/google-cloud-managedkafka/0.26.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.24.0](/java/docs/reference/google-cloud-managedkafka/0.24.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.23.0](/java/docs/reference/google-cloud-managedkafka/0.23.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.20.0](/java/docs/reference/google-cloud-managedkafka/0.20.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.19.0](/java/docs/reference/google-cloud-managedkafka/0.19.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.18.0](/java/docs/reference/google-cloud-managedkafka/0.18.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.16.1](/java/docs/reference/google-cloud-managedkafka/0.16.1/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.15.0](/java/docs/reference/google-cloud-managedkafka/0.15.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.14.0](/java/docs/reference/google-cloud-managedkafka/0.14.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.13.0](/java/docs/reference/google-cloud-managedkafka/0.13.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.12.0](/java/docs/reference/google-cloud-managedkafka/0.12.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.11.0](/java/docs/reference/google-cloud-managedkafka/0.11.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.10.0](/java/docs/reference/google-cloud-managedkafka/0.10.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.9.0](/java/docs/reference/google-cloud-managedkafka/0.9.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.8.0](/java/docs/reference/google-cloud-managedkafka/0.8.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.7.0](/java/docs/reference/google-cloud-managedkafka/0.7.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.5.0](/java/docs/reference/google-cloud-managedkafka/0.5.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.4.0](/java/docs/reference/google-cloud-managedkafka/0.4.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.3.0](/java/docs/reference/google-cloud-managedkafka/0.3.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.2.0](/java/docs/reference/google-cloud-managedkafka/0.2.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder)\n- [0.1.0](/java/docs/reference/google-cloud-managedkafka/0.1.0/com.google.cloud.managedkafka.v1.TlsConfigOrBuilder) \n\n public interface TlsConfigOrBuilder extends MessageOrBuilder\n\nImplements\n----------\n\n[MessageOrBuilder](https://cloud.google.com/java/docs/reference/protobuf/latest/com.google.protobuf.MessageOrBuilder.html)\n\nMethods\n-------\n\n### getSslPrincipalMappingRules()\n\n public abstract String getSslPrincipalMappingRules()\n\nOptional. A list of rules for mapping from SSL principal names to\nshort names. These are applied in order by Kafka.\nRefer to the Apache Kafka documentation for `ssl.principal.mapping.rules`\nfor the precise formatting details and syntax.\nExample: \"RULE:\\^CN=(.*?),OU=ServiceUsers.*$/$1@example.com/,DEFAULT\"\n\nThis is a static Kafka broker configuration. Setting or modifying this\nfield will trigger a rolling restart of the Kafka brokers to apply\nthe change. An empty string means no rules are applied (Kafka default).\n\n`string ssl_principal_mapping_rules = 2 [(.google.api.field_behavior) = OPTIONAL];`\n\n### getSslPrincipalMappingRulesBytes()\n\n public abstract ByteString getSslPrincipalMappingRulesBytes()\n\nOptional. A list of rules for mapping from SSL principal names to\nshort names. These are applied in order by Kafka.\nRefer to the Apache Kafka documentation for `ssl.principal.mapping.rules`\nfor the precise formatting details and syntax.\nExample: \"RULE:\\^CN=(.*?),OU=ServiceUsers.*$/$1@example.com/,DEFAULT\"\n\nThis is a static Kafka broker configuration. Setting or modifying this\nfield will trigger a rolling restart of the Kafka brokers to apply\nthe change. An empty string means no rules are applied (Kafka default).\n\n`string ssl_principal_mapping_rules = 2 [(.google.api.field_behavior) = OPTIONAL];`\n\n### getTrustConfig()\n\n public abstract TrustConfig getTrustConfig()\n\nOptional. The configuration of the broker truststore. If specified, clients\ncan use mTLS for authentication.\n\n`\n.google.cloud.managedkafka.v1.TrustConfig trust_config = 1 [(.google.api.field_behavior) = OPTIONAL];\n`\n\n### getTrustConfigOrBuilder()\n\n public abstract TrustConfigOrBuilder getTrustConfigOrBuilder()\n\nOptional. The configuration of the broker truststore. If specified, clients\ncan use mTLS for authentication.\n\n`\n.google.cloud.managedkafka.v1.TrustConfig trust_config = 1 [(.google.api.field_behavior) = OPTIONAL];\n`\n\n### hasTrustConfig()\n\n public abstract boolean hasTrustConfig()\n\nOptional. The configuration of the broker truststore. If specified, clients\ncan use mTLS for authentication.\n\n`\n.google.cloud.managedkafka.v1.TrustConfig trust_config = 1 [(.google.api.field_behavior) = OPTIONAL];\n`"]]