File tree Expand file tree Collapse file tree 1 file changed +11
-7
lines changed Expand file tree Collapse file tree 1 file changed +11
-7
lines changed Original file line number Diff line number Diff line change @@ -43,20 +43,24 @@ Specifying credentials at the gateway level is the default operation mode, where
43
43
backends will be presented with a single gateway certificate. Per-service overrides are
44
44
subject for consideration as the future work.
45
45
46
- ** 1. Add a new ` BackendValidation ` field at TLSConfig struct located in GatewayTLSConfig.Default field **
46
+ ** 1. Add a new ` Backend ` field at GatewayTLSConfig struct located in Gateway **
47
47
48
48
``` go
49
- // TLSConfig describes TLS configuration that can apply to multiple Listeners
50
- // within this Gateway.
51
- type TLSConfig struct {
52
- ...
53
- // GatewayBackendTLS describes TLS configuration for gateway when connecting
49
+ // GatewayTLSConfig specifies frontend and backend tls configuration for gateway.
50
+ type GatewayTLSConfig struct {
51
+ // Backend describes TLS configuration for gateway when connecting
54
52
// to backends.
53
+ //
54
+ // Note that this contains only details for the Gateway as a TLS client,
55
+ // and does _not_ imply behavior about how to choose which backend should
56
+ // get a TLS connection. That is determined by the presence of a BackendTLSPolicy.
57
+ //
55
58
// Support: Core
56
59
//
57
60
// +optional
58
61
// <gateway:experimental>
59
- BackendValidation *GatewayBackendTLS ` json:"backendValidation,omitempty"`
62
+ Backend *GatewayBackendTLS ` json:"backend,omitempty"`
63
+ ...
60
64
}
61
65
type GatewayBackendTLS struct {
62
66
// ClientCertificateRef is a reference to an object that contains a Client
You can’t perform that action at this time.
0 commit comments