Package com.google.cloud.compute.v1

Class SecuritySettings.Builder

java.lang.Object
com.google.protobuf.AbstractMessageLite.Builder
com.google.protobuf.AbstractMessage.Builder<BuilderT>
com.google.protobuf.GeneratedMessage.Builder<SecuritySettings.Builder>
com.google.cloud.compute.v1.SecuritySettings.Builder
All Implemented Interfaces:
SecuritySettingsOrBuilder, com.google.protobuf.Message.Builder, com.google.protobuf.MessageLite.Builder, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Cloneable
Enclosing class:
SecuritySettings
public static final class SecuritySettings.Builder extends com.google.protobuf.GeneratedMessage.Builder<SecuritySettings.Builder> implements SecuritySettingsOrBuilder
 The authentication and authorization settings for a BackendService.
Protobuf type google.cloud.compute.v1.SecuritySettings

  • Method Details

    • getDescriptor

      public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

    • internalGetFieldAccessorTable

      protected com.google.protobuf.GeneratedMessage.FieldAccessorTable internalGetFieldAccessorTable()
      Specified by:
      internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessage.Builder<SecuritySettings.Builder>

    • clear

      public SecuritySettings.Builder clear()
      Specified by:
      clear in interface com.google.protobuf.Message.Builder
      Specified by:
      clear in interface com.google.protobuf.MessageLite.Builder
      Overrides:
      clear in class com.google.protobuf.GeneratedMessage.Builder<SecuritySettings.Builder>

    • getDescriptorForType

      public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
      Specified by:
      getDescriptorForType in interface com.google.protobuf.Message.Builder
      Specified by:
      getDescriptorForType in interface com.google.protobuf.MessageOrBuilder
      Overrides:
      getDescriptorForType in class com.google.protobuf.GeneratedMessage.Builder<SecuritySettings.Builder>

    • getDefaultInstanceForType

      public SecuritySettings getDefaultInstanceForType()
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder

    • build

      public SecuritySettings build()
      Specified by:
      build in interface com.google.protobuf.Message.Builder
      Specified by:
      build in interface com.google.protobuf.MessageLite.Builder

    • buildPartial

      public SecuritySettings buildPartial()
      Specified by:
      buildPartial in interface com.google.protobuf.Message.Builder
      Specified by:
      buildPartial in interface com.google.protobuf.MessageLite.Builder

    • mergeFrom

      public SecuritySettings.Builder mergeFrom(com.google.protobuf.Message other)
      Specified by:
      mergeFrom in interface com.google.protobuf.Message.Builder
      Overrides:
      mergeFrom in class com.google.protobuf.AbstractMessage.Builder<SecuritySettings.Builder>

    • mergeFrom

      public SecuritySettings.Builder mergeFrom(SecuritySettings other)

    • isInitialized

      public final boolean isInitialized()
      Specified by:
      isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
      Overrides:
      isInitialized in class com.google.protobuf.GeneratedMessage.Builder<SecuritySettings.Builder>

    • mergeFrom

      public SecuritySettings.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Specified by:
      mergeFrom in interface com.google.protobuf.Message.Builder
      Specified by:
      mergeFrom in interface com.google.protobuf.MessageLite.Builder
      Overrides:
      mergeFrom in class com.google.protobuf.AbstractMessage.Builder<SecuritySettings.Builder>
      Throws:
      IOException

    • hasAwsV4Authentication

      public boolean hasAwsV4Authentication()
       The configuration needed to generate a signature for access to private
 storage buckets that support AWS's Signature Version 4 for authentication.
 Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
      optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;
      Specified by:
      hasAwsV4Authentication in interface SecuritySettingsOrBuilder
      Returns:
      Whether the awsV4Authentication field is set.

    • getAwsV4Authentication

      public AWSV4Signature getAwsV4Authentication()
       The configuration needed to generate a signature for access to private
 storage buckets that support AWS's Signature Version 4 for authentication.
 Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
      optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;
      Specified by:
      getAwsV4Authentication in interface SecuritySettingsOrBuilder
      Returns:
      The awsV4Authentication.

    • setAwsV4Authentication

      public SecuritySettings.Builder setAwsV4Authentication(AWSV4Signature value)
       The configuration needed to generate a signature for access to private
 storage buckets that support AWS's Signature Version 4 for authentication.
 Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
      optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;

    • setAwsV4Authentication

      public SecuritySettings.Builder setAwsV4Authentication(AWSV4Signature.Builder builderForValue)
       The configuration needed to generate a signature for access to private
 storage buckets that support AWS's Signature Version 4 for authentication.
 Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
      optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;

    • mergeAwsV4Authentication

      public SecuritySettings.Builder mergeAwsV4Authentication(AWSV4Signature value)
       The configuration needed to generate a signature for access to private
 storage buckets that support AWS's Signature Version 4 for authentication.
 Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
      optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;

    • clearAwsV4Authentication

      public SecuritySettings.Builder clearAwsV4Authentication()
       The configuration needed to generate a signature for access to private
 storage buckets that support AWS's Signature Version 4 for authentication.
 Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
      optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;

    • getAwsV4AuthenticationBuilder

      public AWSV4Signature.Builder getAwsV4AuthenticationBuilder()
       The configuration needed to generate a signature for access to private
 storage buckets that support AWS's Signature Version 4 for authentication.
 Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
      optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;

    • getAwsV4AuthenticationOrBuilder

      public AWSV4SignatureOrBuilder getAwsV4AuthenticationOrBuilder()
       The configuration needed to generate a signature for access to private
 storage buckets that support AWS's Signature Version 4 for authentication.
 Allowed only for INTERNET_IP_PORT and INTERNET_FQDN_PORT NEG backends.
      optional .google.cloud.compute.v1.AWSV4Signature aws_v4_authentication = 433993111;
      Specified by:
      getAwsV4AuthenticationOrBuilder in interface SecuritySettingsOrBuilder

    • hasClientTlsPolicy

      public boolean hasClientTlsPolicy()
       Optional. A URL referring to a networksecurity.ClientTlsPolicy resource
 that describes how clients should authenticate with this service's
 backends.

 clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set
 to INTERNAL_SELF_MANAGED.

 If left blank, communications are not encrypted.
      optional string client_tls_policy = 462325226;
      Specified by:
      hasClientTlsPolicy in interface SecuritySettingsOrBuilder
      Returns:
      Whether the clientTlsPolicy field is set.

    • getClientTlsPolicy

      public String getClientTlsPolicy()
       Optional. A URL referring to a networksecurity.ClientTlsPolicy resource
 that describes how clients should authenticate with this service's
 backends.

 clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set
 to INTERNAL_SELF_MANAGED.

 If left blank, communications are not encrypted.
      optional string client_tls_policy = 462325226;
      Specified by:
      getClientTlsPolicy in interface SecuritySettingsOrBuilder
      Returns:
      The clientTlsPolicy.

    • getClientTlsPolicyBytes

      public com.google.protobuf.ByteString getClientTlsPolicyBytes()
       Optional. A URL referring to a networksecurity.ClientTlsPolicy resource
 that describes how clients should authenticate with this service's
 backends.

 clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set
 to INTERNAL_SELF_MANAGED.

 If left blank, communications are not encrypted.
      optional string client_tls_policy = 462325226;
      Specified by:
      getClientTlsPolicyBytes in interface SecuritySettingsOrBuilder
      Returns:
      The bytes for clientTlsPolicy.

    • setClientTlsPolicy

      public SecuritySettings.Builder setClientTlsPolicy(String value)
       Optional. A URL referring to a networksecurity.ClientTlsPolicy resource
 that describes how clients should authenticate with this service's
 backends.

 clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set
 to INTERNAL_SELF_MANAGED.

 If left blank, communications are not encrypted.
      optional string client_tls_policy = 462325226;
      Parameters:
      value - The clientTlsPolicy to set.
      Returns:
      This builder for chaining.

    • clearClientTlsPolicy

      public SecuritySettings.Builder clearClientTlsPolicy()
       Optional. A URL referring to a networksecurity.ClientTlsPolicy resource
 that describes how clients should authenticate with this service's
 backends.

 clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set
 to INTERNAL_SELF_MANAGED.

 If left blank, communications are not encrypted.
      optional string client_tls_policy = 462325226;
      Returns:
      This builder for chaining.

    • setClientTlsPolicyBytes

      public SecuritySettings.Builder setClientTlsPolicyBytes(com.google.protobuf.ByteString value)
       Optional. A URL referring to a networksecurity.ClientTlsPolicy resource
 that describes how clients should authenticate with this service's
 backends.

 clientTlsPolicy only applies to a globalBackendService with the loadBalancingScheme set
 to INTERNAL_SELF_MANAGED.

 If left blank, communications are not encrypted.
      optional string client_tls_policy = 462325226;
      Parameters:
      value - The bytes for clientTlsPolicy to set.
      Returns:
      This builder for chaining.

    • getSubjectAltNamesList

      public com.google.protobuf.ProtocolStringList getSubjectAltNamesList()
       Optional. A list of Subject Alternative Names (SANs) that the client
 verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
 to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
 specified values, the communication continues. Otherwise, it fails. This
 additional check enables the client to verify that the server is authorized
 to run the requested service.

 Note that the contents of the server
 certificate's subjectAltName field are configured by the
 Public Key Infrastructure which provisions server identities.

 Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
 Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
 mode).
      repeated string subject_alt_names = 330029535;
      Specified by:
      getSubjectAltNamesList in interface SecuritySettingsOrBuilder
      Returns:
      A list containing the subjectAltNames.

    • getSubjectAltNamesCount

      public int getSubjectAltNamesCount()
       Optional. A list of Subject Alternative Names (SANs) that the client
 verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
 to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
 specified values, the communication continues. Otherwise, it fails. This
 additional check enables the client to verify that the server is authorized
 to run the requested service.

 Note that the contents of the server
 certificate's subjectAltName field are configured by the
 Public Key Infrastructure which provisions server identities.

 Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
 Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
 mode).
      repeated string subject_alt_names = 330029535;
      Specified by:
      getSubjectAltNamesCount in interface SecuritySettingsOrBuilder
      Returns:
      The count of subjectAltNames.

    • getSubjectAltNames

      public String getSubjectAltNames(int index)
       Optional. A list of Subject Alternative Names (SANs) that the client
 verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
 to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
 specified values, the communication continues. Otherwise, it fails. This
 additional check enables the client to verify that the server is authorized
 to run the requested service.

 Note that the contents of the server
 certificate's subjectAltName field are configured by the
 Public Key Infrastructure which provisions server identities.

 Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
 Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
 mode).
      repeated string subject_alt_names = 330029535;
      Specified by:
      getSubjectAltNames in interface SecuritySettingsOrBuilder
      Parameters:
      index - The index of the element to return.
      Returns:
      The subjectAltNames at the given index.

    • getSubjectAltNamesBytes

      public com.google.protobuf.ByteString getSubjectAltNamesBytes(int index)
       Optional. A list of Subject Alternative Names (SANs) that the client
 verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
 to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
 specified values, the communication continues. Otherwise, it fails. This
 additional check enables the client to verify that the server is authorized
 to run the requested service.

 Note that the contents of the server
 certificate's subjectAltName field are configured by the
 Public Key Infrastructure which provisions server identities.

 Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
 Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
 mode).
      repeated string subject_alt_names = 330029535;
      Specified by:
      getSubjectAltNamesBytes in interface SecuritySettingsOrBuilder
      Parameters:
      index - The index of the value to return.
      Returns:
      The bytes of the subjectAltNames at the given index.

    • setSubjectAltNames

      public SecuritySettings.Builder setSubjectAltNames(int index, String value)
       Optional. A list of Subject Alternative Names (SANs) that the client
 verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
 to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
 specified values, the communication continues. Otherwise, it fails. This
 additional check enables the client to verify that the server is authorized
 to run the requested service.

 Note that the contents of the server
 certificate's subjectAltName field are configured by the
 Public Key Infrastructure which provisions server identities.

 Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
 Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
 mode).
      repeated string subject_alt_names = 330029535;
      Parameters:
      index - The index to set the value at.
      value - The subjectAltNames to set.
      Returns:
      This builder for chaining.

    • addSubjectAltNames

      public SecuritySettings.Builder addSubjectAltNames(String value)
       Optional. A list of Subject Alternative Names (SANs) that the client
 verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
 to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
 specified values, the communication continues. Otherwise, it fails. This
 additional check enables the client to verify that the server is authorized
 to run the requested service.

 Note that the contents of the server
 certificate's subjectAltName field are configured by the
 Public Key Infrastructure which provisions server identities.

 Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
 Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
 mode).
      repeated string subject_alt_names = 330029535;
      Parameters:
      value - The subjectAltNames to add.
      Returns:
      This builder for chaining.

    • addAllSubjectAltNames

      public SecuritySettings.Builder addAllSubjectAltNames(Iterable<String> values)
       Optional. A list of Subject Alternative Names (SANs) that the client
 verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
 to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
 specified values, the communication continues. Otherwise, it fails. This
 additional check enables the client to verify that the server is authorized
 to run the requested service.

 Note that the contents of the server
 certificate's subjectAltName field are configured by the
 Public Key Infrastructure which provisions server identities.

 Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
 Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
 mode).
      repeated string subject_alt_names = 330029535;
      Parameters:
      values - The subjectAltNames to add.
      Returns:
      This builder for chaining.

    • clearSubjectAltNames

      public SecuritySettings.Builder clearSubjectAltNames()
       Optional. A list of Subject Alternative Names (SANs) that the client
 verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
 to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
 specified values, the communication continues. Otherwise, it fails. This
 additional check enables the client to verify that the server is authorized
 to run the requested service.

 Note that the contents of the server
 certificate's subjectAltName field are configured by the
 Public Key Infrastructure which provisions server identities.

 Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
 Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
 mode).
      repeated string subject_alt_names = 330029535;
      Returns:
      This builder for chaining.

    • addSubjectAltNamesBytes

      public SecuritySettings.Builder addSubjectAltNamesBytes(com.google.protobuf.ByteString value)
       Optional. A list of Subject Alternative Names (SANs) that the client
 verifies during a mutual TLS handshake with an server/endpoint for thisBackendService. When the server presents its X.509 certificate
 to the client, the client inspects the certificate'ssubjectAltName field. If the field contains one of the
 specified values, the communication continues. Otherwise, it fails. This
 additional check enables the client to verify that the server is authorized
 to run the requested service.

 Note that the contents of the server
 certificate's subjectAltName field are configured by the
 Public Key Infrastructure which provisions server identities.

 Only applies to a global BackendService withloadBalancingScheme set to INTERNAL_SELF_MANAGED.
 Only applies when BackendService has an attachedclientTlsPolicy with clientCertificate (mTLS
 mode).
      repeated string subject_alt_names = 330029535;
      Parameters:
      value - The bytes of the subjectAltNames to add.
      Returns:
      This builder for chaining.