Connection can be either plaintext or TLS with Client cert.

Client cert must be presented, connection is in TLS.

Principal will be set to the identity from origin authentication.

Principal will be set to the identity from peer authentication.

Enum value maps for MutualTls_Mode.

Enum value maps for MutualTls_Mode.

Enum value maps for PrincipalBinding.

Enum value maps for PrincipalBinding.

$hide_from_docs Deprecated.

$hide_from_docs Trigger rule to match against a request.

$hide_from_docs Deprecated.

$hide_from_docs Deprecated.

$hide_from_docs Deprecated.

$hide_from_docs Policy defines what authentication methods can be accepted on workload(s), and if authenticated, which method/certificate will set the request principal (i.e request.auth.principal attribute).

$hide_from_docs Deprecated.

$hide_from_docs Describes how to match a given string.

$hide_from_docs Deprecated.

$hide_from_docs Defines the acceptable connection TLS mode.

$hide_from_docs Deprecated.