Google Cloud Network Security V1 Client - Class PrincipalSelector (1.3.0)

Reference documentation and code samples for the Google Cloud Network Security V1 Client class PrincipalSelector.

The principal value the principal rule will match against.

Protobuf type google.cloud.networksecurity.v1.AuthzPolicy.AuthzRule.Principal.PrincipalSelector

Namespace

Google \ Cloud \ NetworkSecurity \ V1 \ AuthzPolicy \ AuthzRule \ Principal

Methods

static::name

Parameter
Name Description
value mixed

static::value

Parameter
Name Description
name mixed

Constants

PRINCIPAL_SELECTOR_UNSPECIFIED

Value: 0

Unspecified principal selector. It will be treated as CLIENT_CERT_URI_SAN by default.

Generated from protobuf enum PRINCIPAL_SELECTOR_UNSPECIFIED = 0;

CLIENT_CERT_URI_SAN

Value: 1

The principal rule is matched against a list of URI SANs in the validated client's certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.

Generated from protobuf enum CLIENT_CERT_URI_SAN = 1;

CLIENT_CERT_DNS_NAME_SAN

Value: 2

The principal rule is matched against a list of DNS Name SANs in the validated client's certificate. A match happens when there is any exact DNS Name SAN value match.

This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_DNS_NAME_SAN is not supported for INTERNAL_SELF_MANAGED load balancing scheme.

Generated from protobuf enum CLIENT_CERT_DNS_NAME_SAN = 2;

CLIENT_CERT_COMMON_NAME

Value: 3

The principal rule is matched against the common name in the client's certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match.

This is only applicable for Application Load Balancers except for global external Application Load Balancer and classic Application Load Balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme.

Generated from protobuf enum CLIENT_CERT_COMMON_NAME = 3;