cdktf-crd/dist/com/google/cloud/cnrm/networksecurity/network-security-client-tls-policy/v1beta1.d.ts

import { Construct } from "constructs";
import { Manifest, type ManifestConfig } from "@cdktn/provider-kubernetes/lib/manifest";
export declare class NetworksecurityCnrmCloudGoogleComNetworkSecurityClientTLSPolicyV1beta1 extends Manifest {
    constructor(scope: Construct, id: string, config: NetworksecurityCnrmCloudGoogleComNetworkSecurityClientTLSPolicyV1beta1Config);
}
export interface NetworksecurityCnrmCloudGoogleComNetworkSecurityClientTLSPolicyV1beta1Config extends ManifestConfig {
    manifest: {
        apiVersion: "networksecurity.cnrm.cloud.google.com/v1beta1";
        kind: "NetworkSecurityClientTLSPolicy";
        metadata: {
            annotations?: {
                [key: string]: string;
            };
            labels?: {
                [key: string]: string;
            };
            name: string;
            namespace?: string;
        };
        spec: {
            /** @description Optional. Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS. */
            clientCertificate?: {
                /** @description The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. */
                certificateProviderInstance?: {
                    /** @description Required. Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance. */
                    pluginInstance: string;
                };
                /** @description gRPC specific configuration to access the gRPC server to obtain the cert and private key. */
                grpcEndpoint?: {
                    /** @description Required. The target URI of the gRPC endpoint. Only UDS path is supported, and should start with “unix:”. */
                    targetUri: string;
                };
            };
            /** @description Optional. Free-text description of the resource. */
            description?: string;
            /** @description Immutable. The location for the resource */
            location: string;
            /** @description Immutable. The Project that this resource belongs to. */
            projectRef?: {
                /**
                 * @description The project for the resource
                 *
                 *     Allowed value: The Google Cloud resource name of a `Project` resource (format: `projects/{{name}}`).
                 */
                external?: string;
                /** @description Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names */
                name?: string;
                /** @description Namespace of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/ */
                namespace?: string;
            } & (unknown | unknown);
            /** @description Immutable. Optional. The name of the resource. Used for creation and acquisition. When unset, the value of `metadata.name` is used as the default. */
            resourceID?: string;
            /** @description Required. Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. */
            serverValidationCa?: {
                /** @description The certificate provider instance specification that will be passed to the data plane, which will be used to load necessary credential information. */
                certificateProviderInstance?: {
                    /** @description Required. Plugin instance name, used to locate and load CertificateProvider instance configuration. Set to "google_cloud_private_spiffe" to use Certificate Authority Service certificate provider instance. */
                    pluginInstance: string;
                };
                /** @description gRPC specific configuration to access the gRPC server to obtain the CA certificate. */
                grpcEndpoint?: {
                    /** @description Required. The target URI of the gRPC endpoint. Only UDS path is supported, and should start with “unix:”. */
                    targetUri: string;
                };
            }[];
            /** @description Optional. Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com". */
            sni?: string;
        };
        status?: {
            /** @description Conditions represent the latest available observation of the resource's current state. */
            conditions?: {
                /** @description Last time the condition transitioned from one status to another. */
                lastTransitionTime?: string;
                /** @description Human-readable message indicating details about last transition. */
                message?: string;
                /** @description Unique, one-word, CamelCase reason for the condition's last transition. */
                reason?: string;
                /** @description Status is the status of the condition. Can be True, False, Unknown. */
                status?: string;
                /** @description Type is the type of the condition. */
                type?: string;
            }[];
            /**
             * Format: date-time
             * @description Output only. The timestamp when the resource was created.
             */
            createTime?: string;
            /** @description ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource. */
            observedGeneration?: number;
            /**
             * Format: date-time
             * @description Output only. The timestamp when the resource was updated.
             */
            updateTime?: string;
        };
    };
}