Skip to content

Commit 0d35360

Browse files
08voltrobscott
andauthored
Apply suggestions from code review
Co-authored-by: Rob Scott <rob.scott87@gmail.com>
1 parent 005de55 commit 0d35360

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

site-src/api-types/backendtlspolicy.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -124,13 +124,21 @@ Also note:
124124
- Wildcard hostnames are not allowed.
125125

126126
#### Subject Alternative Names
127+
128+
??? example "Experimental Channel since v1.2.0"
129+
130+
This field was added to BackendTLSPolicy in `v1.2.0`
127131
The subjectAltNames field enables separation between the SNI (specified by hostname) and certificate identity validation. When specified, the certificate served by the backend must have at least one Subject Alternative Name matching one of the specified values. This is particularly useful for SPIFFE implementations where URI-based SANs may not be valid SNIs.
128132
Subject Alternative Names can be of two types:
129133

130134
- Hostname: DNS name format
131135
- URI: URI format (e.g., SPIFFE ID)
132136

133137
#### TLS Options
138+
139+
??? example "Experimental Channel since v1.2.0"
140+
141+
This field was added to BackendTLSPolicy in `v1.2.0`
134142
The options field allows specification of implementation-specific TLS configurations, similar to the TLS options field on Gateway Listeners. This can include:
135143

136144
- Vendor-specific mTLS automation configuration

0 commit comments

Comments
 (0)