Some or all of the information on this page might not apply to Cloud de Confiance by S3NS. See Differences from Google Cloud for more details.

Class MeshCertificates (2.65.0)

MeshCertificates(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Configuration for issuance of mTLS keys and certificates to Kubernetes pods.

Attribute
Name	Description
`enable_certificates`	`google.protobuf.wrappers_pb2.BoolValue` enable_certificates controls issuance of workload mTLS certificates. If set, the GKE Workload Identity Certificates controller and node agent will be deployed in the cluster, which can then be configured by creating a WorkloadCertificateConfig Custom Resource. Requires Workload Identity (`workload_pool][google.container.v1alpha1.WorkloadIdentityConfig.workload_pool]` must be non-empty).

Attribute

Name Description

enable_certificates google.protobuf.wrappers_pb2.BoolValue
enable_certificates controls issuance of workload mTLS certificates. If set, the GKE Workload Identity Certificates controller and node agent will be deployed in the cluster, which can then be configured by creating a WorkloadCertificateConfig Custom Resource. Requires Workload Identity (workload_pool][google.container.v1alpha1.WorkloadIdentityConfig.workload_pool] must be non-empty).

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-06-03 UTC.