You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| metrics_auth | boolean (default: false) | If true, requires authentication for requests to the metrics exporter |
49
-
| <spanclass="break-all">min_control_TLS_version</span> |'1.2'<br />'1.3'| The minimum version of TLS protocol which is supported at the control path |
50
-
| min_data_TLS_version |'1.2'<br />'1.3'| The minimum version of TLS protocol which is supported at the data path |
51
-
| <spanclass="break-all">min_sentinel_TLS_version</span> |'1.2'<br />'1.3'| The minimum version of TLS protocol which is supported at the data path |
49
+
| <spanclass="break-all">min_control_TLS_version</span> |"1.2"<br />"1.3"| The minimum version of TLS protocol which is supported at the control path |
50
+
| min_data_TLS_version |"1.2"<br />"1.3"| The minimum version of TLS protocol which is supported at the data path |
51
+
| <spanclass="break-all">min_sentinel_TLS_version</span> |"1.2"<br />"1.3"| The minimum version of TLS protocol which is supported at the data path |
52
52
| <spanclass="break-all">mtls_authorized_subjects</span> | array | {{<code>}}[{<br /> "CN": string,<br /> "O": string,<br /> "OU": [array of strings],<br /> "L": string,<br /> "ST": string,<br /> "C": string<br />}, ...]{{</code>}} A list of valid subjects used for additional certificate validations during TLS client authentication. All subject attributes are case-sensitive.<br />**Required subject fields**:<br />"CN" for Common Name<br />**Optional subject fields:**<br />"O" for Organization<br />"OU" for Organizational Unit (array of strings)<br />"L" for Locality (city)<br />"ST" for State/Province<br />"C" for 2-letter country code |
53
53
| <spanclass="break-all">mtls_certificate_authentication</span> | boolean | Require authentication of client certificates for mTLS connections to the cluster. The API_CA certificate should be configured as a prerequisite. |
54
-
| <spanclass="break-all">mtls_client_cert_subject_validation_type</span> |`disabled`<br />`san_cn`<br />`full_subject`| Enables additional certificate validations that further limit connections to clients with valid certificates during TLS client authentication.<br />Values:<br />**disabled**: Authenticates clients with valid certificates. No additional validations are enforced.<br />**san_cn**: A client certificate is valid only if its Common Name (CN) matches an entry in the list of valid subjects. Ignores other Subject attributes.<br />**full_subject**: A client certificate is valid only if its Subject attributes match an entry in the list of valid subjects. |
55
-
| multi_commands_opt |**`disabled`**<br />`batch`<br />`force_disabled`| Determines the default `multi_commands_opt` setting for databases in the cluster. If set to `batch`, it reduces the overhead of transaction management by batching multiple commands into a single transaction.<br />Values:<br />**disabled**: Turns off the optimization for all databases except those that override it on the [bdb level]({{<relref "/operate/rs/references/rest-api/objects/bdb">}}). Default value.<br />**batch**: Enables the optimization on all databases except those that override it on the [bdb level]({{<relref "/operate/rs/references/rest-api/objects/bdb">}}).<br />**force_disabled**: Disables the optimization for all databases, even those that override it on the [bdb level]({{<relref "/operate/rs/references/rest-api/objects/bdb">}}). |
54
+
| <spanclass="break-all">mtls_client_cert_subject_validation_type</span> |"disabled"<br />"san_cn"<br />"full_subject"| Enables additional certificate validations that further limit connections to clients with valid certificates during TLS client authentication.<br />Values:<br />**disabled**: Authenticates clients with valid certificates. No additional validations are enforced.<br />**san_cn**: A client certificate is valid only if its Common Name (CN) matches an entry in the list of valid subjects. Ignores other Subject attributes.<br />**full_subject**: A client certificate is valid only if its Subject attributes match an entry in the list of valid subjects. |
55
+
| multi_commands_opt |**"disabled"**<br />"batch"<br />"force_disabled"| Determines the default `multi_commands_opt` setting for databases in the cluster. If set to `batch`, it reduces the overhead of transaction management by batching multiple commands into a single transaction.<br />Values:<br />**disabled**: Turns off the optimization for all databases except those that override it on the [bdb level]({{<relref "/operate/rs/references/rest-api/objects/bdb">}}). Default value.<br />**batch**: Enables the optimization on all databases except those that override it on the [bdb level]({{<relref "/operate/rs/references/rest-api/objects/bdb">}}).<br />**force_disabled**: Disables the optimization for all databases, even those that override it on the [bdb level]({{<relref "/operate/rs/references/rest-api/objects/bdb">}}). |
56
56
| name | string | Cluster's fully qualified domain name (read-only) |
| <spanclass="break-all">password_expiration_duration</span> | integer (default: 0) | The number of days a password is valid until the user is required to replace it |
@@ -67,7 +67,7 @@ An API object that represents the cluster.
| <spanclass="break-all">sentinel_cipher_suites</span> | array | Specifies the list of enabled ciphers for the sentinel service. The supported ciphers are those implemented by the [cipher_suites.go](<https://golang.org/src/crypto/tls/cipher_suites.go>) package. |
69
69
| <spanclass="break-all">sentinel_cipher_suites_tls_1_3<span> | string | Specifies the list of enabled TLS 1.3 ciphers for the discovery (sentinel) service. The supported ciphers are those implemented by the [cipher_suites.go](<https://golang.org/src/crypto/tls/cipher_suites.go>) package.(read-only) |
70
-
| sentinel_tls_mode |'allowed'<br />'disabled' <br />'required'| Determines whether the discovery service allows, blocks, or requires TLS connections (previously named `sentinel_ssl_policy`)<br />**allowed**: Allows both TLS and non-TLS connections<br />**disabled**: Allows only non-TLS connections<br />**required**: Allows only TLS connections |
70
+
| sentinel_tls_mode |"allowed"<br />"disabled" <br />"required"| Determines whether the discovery service allows, blocks, or requires TLS connections (previously named `sentinel_ssl_policy`)<br />**allowed**: Allows both TLS and non-TLS connections<br />**disabled**: Allows only non-TLS connections<br />**required**: Allows only TLS connections |
| <spanclass="break-all">slave_ha_bdb_cooldown_period</span> | integer (default: 86400) | Time in seconds between runs of the replica high-availability mechanism on different nodes on the same database (read-only) |
73
73
| <spanclass="break-all">slave_ha_cooldown_period</span> | integer (default: 3600) | Time in seconds between runs of the replica high-availability mechanism on different nodes (read-only) |
@@ -76,7 +76,7 @@ An API object that represents the cluster.
76
76
| smtp_host | string | SMTP server for automated emails |
77
77
| smtp_password | string | SMTP server password |
78
78
| smtp_port | integer | SMTP server port for automated emails |
79
-
| smtp_tls_mode |'none'<br />'starttls'<br />'tls'| Specifies which TLS mode to use for SMTP access |
79
+
| smtp_tls_mode |"none"<br />"starttls"<br />"tls"| Specifies which TLS mode to use for SMTP access |
80
80
| smtp_use_tls | boolean (default: false) | Use TLS for SMTP access (deprecated as of Redis Enterprise v4.3.3, use smtp_tls_mode field instead) |
81
81
| smtp_username | string | SMTP server username (pattern does not allow special characters &,\<,>,") |
0 commit comments