File tree Expand file tree Collapse file tree 1 file changed +11
-7
lines changed Expand file tree Collapse file tree 1 file changed +11
-7
lines changed Original file line number Diff line number Diff line change @@ -43,20 +43,24 @@ Specifying credentials at the gateway level is the default operation mode, where
4343backends will be presented with a single gateway certificate. Per-service overrides are
4444subject for consideration as the future work.
4545
46- ** 1. Add a new ` BackendValidation ` field at TLSConfig struct located in GatewayTLSConfig.Default field **
46+ ** 1. Add a new ` Backend ` field at GatewayTLSConfig struct located in Gateway **
4747
4848``` go
49- // TLSConfig describes TLS configuration that can apply to multiple Listeners
50- // within this Gateway.
51- type TLSConfig struct {
52- ...
53- // GatewayBackendTLS describes TLS configuration for gateway when connecting
49+ // GatewayTLSConfig specifies frontend and backend tls configuration for gateway.
50+ type GatewayTLSConfig struct {
51+ // Backend describes TLS configuration for gateway when connecting
5452 // to backends.
53+ //
54+ // Note that this contains only details for the Gateway as a TLS client,
55+ // and does _not_ imply behavior about how to choose which backend should
56+ // get a TLS connection. That is determined by the presence of a BackendTLSPolicy.
57+ //
5558 // Support: Core
5659 //
5760 // +optional
5861 // <gateway:experimental>
59- BackendValidation *GatewayBackendTLS ` json:"backendValidation,omitempty"`
62+ Backend *GatewayBackendTLS ` json:"backend,omitempty"`
63+ ...
6064}
6165type GatewayBackendTLS struct {
6266 // ClientCertificateRef is a reference to an object that contains a Client
You can’t perform that action at this time.
0 commit comments