meshca_experimental

type GoogleMeshCaConfig struct {

	// GoogleMeshCA server endpoint to get CSRs signed via the *CreateCertificate*
	// unary call. This must have :ref:`api_type
	// <envoy_api_field_config.core.v3.ApiConfigSource.api_type>` :ref:`GRPC
	// <envoy_api_enum_value_config.core.v3.ApiConfigSource.ApiType.GRPC>`.
	// STS based call credentials need to be supplied in :ref:`call_credentials
	// <envoy_api_field_config.core.v3.GrpcService.GoogleGrpc.call_credentials>`.
	//
	// If :ref:`timeout envoy_api_field_config.core.v3.GrpcService.timeout` is
	// left unspecified, a default value of 10s will be used.
	Server *v3.ApiConfigSource `protobuf:"bytes,1,opt,name=server,proto3" json:"server,omitempty"`
	// Certificate lifetime to request in CSRs sent to the MeshCA.
	//
	// A default value of 24h will be used if left unspecified.
	CertificateLifetime *durationpb.Duration `protobuf:"bytes,2,opt,name=certificate_lifetime,json=certificateLifetime,proto3" json:"certificate_lifetime,omitempty"`
	// How long before certificate expiration should the certificate be renewed.
	//
	// A default value of 12h will be used if left unspecified.
	RenewalGracePeriod *durationpb.Duration `protobuf:"bytes,3,opt,name=renewal_grace_period,json=renewalGracePeriod,proto3" json:"renewal_grace_period,omitempty"`
	// Type of key.
	//
	// RSA keys will be used if left unspecified.
	KeyType GoogleMeshCaConfig_KeyType `` /* 153-byte string literal not displayed */
	// Size of the key in bits.
	//
	// 2048 bit keys will be used if left unspecified.
	KeySize uint32 `protobuf:"varint,5,opt,name=key_size,json=keySize,proto3" json:"key_size,omitempty"`
	// GCE location (region/zone) where the workload is located.
	//
	// GCE/GKE Metadata Server will be contacted if left unspecified.
	Location string `protobuf:"bytes,6,opt,name=location,proto3" json:"location,omitempty"`
	// contains filtered or unexported fields
}

type GoogleMeshCaConfig_KeyType int32