Class TlsValidationTrust

Defines the TLS Validation Context Trust.

Inheritance

TlsValidationTrust

Namespace: Amazon.CDK.AWS.AppMesh

Assembly: Amazon.CDK.Lib.dll

Syntax (csharp)

public abstract class TlsValidationTrust : DeputyBase

Syntax (vb)

Public MustInherit Class TlsValidationTrust Inherits DeputyBase

Remarks

ExampleMetadata: infused

Examples

Mesh mesh;
            Service service;


            var node = new VirtualNode(this, "node", new VirtualNodeProps {
                Mesh = mesh,
                ServiceDiscovery = ServiceDiscovery.CloudMap(service),
                Listeners = new [] { VirtualNodeListener.Http(new HttpVirtualNodeListenerOptions {
                    Port = 8080,
                    HealthCheck = HealthCheck.Http(new HttpHealthCheckOptions {
                        HealthyThreshold = 3,
                        Interval = Duration.Seconds(5),
                        Path = "/ping",
                        Timeout = Duration.Seconds(2),
                        UnhealthyThreshold = 2
                    }),
                    Timeout = new HttpTimeout {
                        Idle = Duration.Seconds(5)
                    }
                }) },
                BackendDefaults = new BackendDefaults {
                    TlsClientPolicy = new TlsClientPolicy {
                        Validation = new TlsValidation {
                            Trust = TlsValidationTrust.File("/keys/local_cert_chain.pem")
                        }
                    }
                },
                AccessLog = AccessLog.FromFilePath("/dev/stdout")
            });

            Tags.Of(node).Add("Environment", "Dev");

Synopsis

Constructors

TlsValidationTrust()

Defines the TLS Validation Context Trust.

Methods

Acm(ICertificateAuthorityRef[])	TLS Validation Context Trust for ACM Private Certificate Authority (CA).
Bind(Construct)	Returns Trust context based on trust type.
File(string)	Tells envoy where to fetch the validation context from.
Sds(string)	TLS Validation Context Trust for Envoy' service discovery service.

Constructors

TlsValidationTrust()

Defines the TLS Validation Context Trust.

protected TlsValidationTrust()

Remarks

ExampleMetadata: infused

Examples

Mesh mesh;
            Service service;


            var node = new VirtualNode(this, "node", new VirtualNodeProps {
                Mesh = mesh,
                ServiceDiscovery = ServiceDiscovery.CloudMap(service),
                Listeners = new [] { VirtualNodeListener.Http(new HttpVirtualNodeListenerOptions {
                    Port = 8080,
                    HealthCheck = HealthCheck.Http(new HttpHealthCheckOptions {
                        HealthyThreshold = 3,
                        Interval = Duration.Seconds(5),
                        Path = "/ping",
                        Timeout = Duration.Seconds(2),
                        UnhealthyThreshold = 2
                    }),
                    Timeout = new HttpTimeout {
                        Idle = Duration.Seconds(5)
                    }
                }) },
                BackendDefaults = new BackendDefaults {
                    TlsClientPolicy = new TlsClientPolicy {
                        Validation = new TlsValidation {
                            Trust = TlsValidationTrust.File("/keys/local_cert_chain.pem")
                        }
                    }
                },
                AccessLog = AccessLog.FromFilePath("/dev/stdout")
            });

            Tags.Of(node).Add("Environment", "Dev");

Methods

Acm(ICertificateAuthorityRef[])

TLS Validation Context Trust for ACM Private Certificate Authority (CA).

public static TlsValidationTrust Acm(ICertificateAuthorityRef[] certificateAuthorities)

Parameters

certificateAuthorities ICertificateAuthorityRef[]

Returns

TlsValidationTrust

Remarks

ExampleMetadata: infused

Bind(Construct)

Returns Trust context based on trust type.

public abstract ITlsValidationTrustConfig Bind(Construct scope)

Parameters

scope Construct

Returns

ITlsValidationTrustConfig

Remarks

ExampleMetadata: infused

File(string)

Tells envoy where to fetch the validation context from.

public static MutualTlsValidationTrust File(string certificateChain)

Parameters

certificateChain string

Returns

MutualTlsValidationTrust

Remarks

ExampleMetadata: infused

Sds(string)

TLS Validation Context Trust for Envoy' service discovery service.

public static MutualTlsValidationTrust Sds(string secretName)

Parameters

secretName string

Returns

MutualTlsValidationTrust

Remarks

ExampleMetadata: infused