You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: SASL/PLAIN authentication scheme for the virtual cluster.
2072
2123
type: object
@@ -2978,6 +3029,34 @@ components:
2978
3029
If false, only TLS connections are allowed. If true, both TLS and plaintext connections are allowed.
2979
3030
type: boolean
2980
3031
default: false
3032
+
client_authentication:
3033
+
description: |
3034
+
Configures mutual TLS (mTLS) client certificate verification. When set, the gateway
3035
+
requests or requires clients to present a certificate during the TLS handshake.
3036
+
type: object
3037
+
properties:
3038
+
mode:
3039
+
description: |
3040
+
* required - Reject TLS connections without a valid client certificate.
3041
+
* requested - Request a client certificate during the TLS handshake, but allow connections without one (falls back to other configured authentication methods). If a certificate is presented but cannot be verified, the connection is closed.
3042
+
type: string
3043
+
enum:
3044
+
- required
3045
+
- requested
3046
+
tls_trust_bundles:
3047
+
description: |
3048
+
References to TLS trust bundle resources used to verify client certificates. Evaluated in order;
3049
+
verification stops at the first trust bundle that successfully validates the client certificate
3050
+
chain. If no trust bundle validates the certificate chain, the connection is closed when mode is
If false, only TLS connections are allowed. If true, both TLS and plaintext connections are allowed.
2997
3076
type: boolean
2998
3077
default: false
3078
+
client_authentication:
3079
+
description: |
3080
+
Configures mutual TLS (mTLS) client certificate verification. When set, the gateway
3081
+
requests or requires clients to present a certificate during the TLS handshake.
3082
+
type: object
3083
+
properties:
3084
+
mode:
3085
+
description: |
3086
+
* required - Reject TLS connections without a valid client certificate.
3087
+
* requested - Request a client certificate during the TLS handshake, but allow connections without one (falls back to other configured authentication methods). If a certificate is presented but cannot be verified, the connection is closed.
3088
+
type: string
3089
+
enum:
3090
+
- required
3091
+
- requested
3092
+
tls_trust_bundles:
3093
+
description: |
3094
+
References to TLS trust bundle resources used to verify client certificates. Evaluated in order;
3095
+
verification stops at the first trust bundle that successfully validates the client certificate
3096
+
chain. If no trust bundle validates the certificate chain, the connection is closed when mode is
The Konnect access token is meant to be used by the Konnect dashboard and the decK CLI authenticate with.
4439
4439
tags:
4440
4440
- name: OpenMeter Billing
4441
-
description: 'Billing manages the billing profiles, and invoices for customers.'
4441
+
description: 'Billing manages the billing profiles, currencies, cost bases, and invoices for customers.'
4442
4442
- name: OpenMeter Apps
4443
4443
description: 'Apps enable you to extend and customize billing and usage workflows by integrating with external systems and services. Apps can automate and enhance your billing ecosystem by supporting capabilities such as synchronizing usage data with third-party platforms, calculating taxes, generating and delivering invoices, handling payment collection, and other billing-related tasks.'
0 commit comments