Vcenter NamespaceManagement Supervisors Networks Edges NSXLoadBalancerUpdateSpec
The Vcenter NamespaceManagement Supervisors Networks Edges NSXLoadBalancerUpdateSpec defines parameters for updating an NSX Load Balancer configuration.
This schema was added in vSphere API 9.0.0.0.
{
"default_ingress_tls_certificate": "string",
"default_ingress_tls_private_key": "string"
}
PEM-encoded x509 certificate used by NSX as a default fallback certificate for Kubernetes Ingress services. Certificate(s) used can be created by one of the two supported methods:
- By signing the Certificate Signing Request obtained from the Namespace Certificate Management API. OR
- By creating a certificate using public key cryptography. In such case the certificate Vcenter NamespaceManagement Supervisors Networks Edges NSXLoadBalancerUpdateSpec.default_ingress_tls_certificate should be specified along with the private key Vcenter NamespaceManagement Supervisors Networks Edges NSXLoadBalancerUpdateSpec.default_ingress_tls_private_key used to generate the certificate.
This property was added in vSphere API 9.0.0.0.
If missing or null
, the Kubernetes Ingress services certificate will not be modified.
Private Key matching Vcenter NamespaceManagement Supervisors Networks Edges NSXLoadBalancerUpdateSpec.default_ingress_tls_certificate
When using certificates generated externally by the user and not using Certificate Signing Request obtained from Namespace Certificate Management API, users should be able to specify the private key which was used to generate the certificate Vcenter NamespaceManagement Supervisors Networks Edges NSXLoadBalancerUpdateSpec.default_ingress_tls_certificate.
Users with externally generated key pairs can import their own public key certificates and key pairs.
This property was added in vSphere API 9.0.0.0.
If missing or null
and Vcenter NamespaceManagement Supervisors Networks Edges NSXLoadBalancerUpdateSpec.default_ingress_tls_certificate is specified then the Supervisor will attempt to find a matching key that was generated with Certificate Signing Request. Otherwise, Vcenter NamespaceManagement Supervisors Networks Edges NSXLoadBalancerUpdateSpec.default_ingress_tls_private_key will not be modified.