.. _envoy_v3_api_file_envoy/extensions/transport_sockets/tls/v3/secret.proto: Secrets configuration ===================== .. _envoy_v3_api_msg_extensions.transport_sockets.tls.v3.GenericSecret: extensions.transport_sockets.tls.v3.GenericSecret ------------------------------------------------- `[extensions.transport_sockets.tls.v3.GenericSecret proto] `_ .. code-block:: json { "secret": "{...}" } .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.GenericSecret.secret: secret (:ref:`config.core.v3.DataSource `) Secret of generic type and is available to filters. .. _envoy_v3_api_msg_extensions.transport_sockets.tls.v3.SdsSecretConfig: extensions.transport_sockets.tls.v3.SdsSecretConfig --------------------------------------------------- `[extensions.transport_sockets.tls.v3.SdsSecretConfig proto] `_ .. code-block:: json { "name": "...", "sds_config": "{...}" } .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.SdsSecretConfig.name: name (`string `_, *REQUIRED*) Name by which the secret can be uniquely referred to. When both name and config are specified, then secret can be fetched and/or reloaded via SDS. When only name is specified, then secret will be loaded from static resources. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.SdsSecretConfig.sds_config: sds_config (:ref:`config.core.v3.ConfigSource `) .. _envoy_v3_api_msg_extensions.transport_sockets.tls.v3.Secret: extensions.transport_sockets.tls.v3.Secret ------------------------------------------ `[extensions.transport_sockets.tls.v3.Secret proto] `_ .. code-block:: json { "name": "...", "tls_certificate": "{...}", "session_ticket_keys": "{...}", "validation_context": "{...}", "generic_secret": "{...}" } .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.Secret.name: name (`string `_) Name (FQDN, UUID, SPKI, SHA256, etc.) by which the secret can be uniquely referred to. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.Secret.tls_certificate: tls_certificate (:ref:`extensions.transport_sockets.tls.v3.TlsCertificate `) Only one of :ref:`tls_certificate `, :ref:`session_ticket_keys `, :ref:`validation_context `, :ref:`generic_secret ` may be set. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.Secret.session_ticket_keys: session_ticket_keys (:ref:`extensions.transport_sockets.tls.v3.TlsSessionTicketKeys `) Only one of :ref:`tls_certificate `, :ref:`session_ticket_keys `, :ref:`validation_context `, :ref:`generic_secret ` may be set. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.Secret.validation_context: validation_context (:ref:`extensions.transport_sockets.tls.v3.CertificateValidationContext `) Only one of :ref:`tls_certificate `, :ref:`session_ticket_keys `, :ref:`validation_context `, :ref:`generic_secret ` may be set. .. _envoy_v3_api_field_extensions.transport_sockets.tls.v3.Secret.generic_secret: generic_secret (:ref:`extensions.transport_sockets.tls.v3.GenericSecret `) Only one of :ref:`tls_certificate `, :ref:`session_ticket_keys `, :ref:`validation_context `, :ref:`generic_secret ` may be set.