istio v1.31.0

DestinationRule.spec.trafficPolicy.loadBalancer.localityLbSetting.failover.spec.trafficPolicy.tls

TLS related settings for connections to the upstream service.

DestinationRule.spec.trafficPolicy.loadBalancer.localityLbSetting.failover.spec.trafficPolicy.tls fields and descriptions
Field / Type	Description
caCertificates `string`	OPTIONAL: The path to the file containing certificate authority certificates to use in verifying a presented server certificate.
caCrl `string`	OPTIONAL: The path to the file containing the certificate revocation list (CRL) to use in verifying a presented server certificate.
clientCertificate `string`	REQUIRED if mode is `MUTUAL`.
credentialName `string`	The name of the secret that holds the TLS certs for the client including the CA certificates.
insecureSkipVerify `boolean`	`insecureSkipVerify` specifies whether the proxy should skip verifying the CA signature and SAN for the server certificate corresponding to the host. `nullable`
mode `string`	Indicates whether connections to this port should be secured using TLS. Valid Options: DISABLE, SIMPLE, MUTUAL, ISTIO_MUTUAL `enum: ["DISABLE","SIMPLE","MUTUAL","ISTIO_MUTUAL"]`
privateKey `string`	REQUIRED if mode is `MUTUAL`.
sni `string`	SNI string to present to the server during TLS handshake.
subjectAltNames `string[]`	A list of alternate names to verify the subject identity in the certificate.