public string SslPrincipalMappingRules { get; set; }
Optional. A list of rules for mapping from SSL principal names to
short names. These are applied in order by Kafka.
Refer to the Apache Kafka documentation for ssl.principal.mapping.rules
for the precise formatting details and syntax.
Example: "RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT"
This is a static Kafka broker configuration. Setting or modifying this
field will trigger a rolling restart of the Kafka brokers to apply
the change. An empty string means no rules are applied (Kafka default).
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-03 UTC."],[],[],null,["# Managed Service for Apache Kafka API v1 API - Class TlsConfig (1.0.0-beta07)\n\nVersion latestkeyboard_arrow_down\n\n- [1.0.0-beta07 (latest)](/dotnet/docs/reference/Google.Cloud.ManagedKafka.V1/latest/Google.Cloud.ManagedKafka.V1.TlsConfig)\n- [1.0.0-beta06](/dotnet/docs/reference/Google.Cloud.ManagedKafka.V1/1.0.0-beta06/Google.Cloud.ManagedKafka.V1.TlsConfig) \n\n public sealed class TlsConfig : IMessage\u003cTlsConfig\u003e, IEquatable\u003cTlsConfig\u003e, IDeepCloneable\u003cTlsConfig\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Managed Service for Apache Kafka API v1 API class TlsConfig.\n\nThe TLS configuration for the Kafka cluster. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e TlsConfig \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[TlsConfig](/dotnet/docs/reference/Google.Cloud.ManagedKafka.V1/latest/Google.Cloud.ManagedKafka.V1.TlsConfig), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[TlsConfig](/dotnet/docs/reference/Google.Cloud.ManagedKafka.V1/latest/Google.Cloud.ManagedKafka.V1.TlsConfig), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[TlsConfig](/dotnet/docs/reference/Google.Cloud.ManagedKafka.V1/latest/Google.Cloud.ManagedKafka.V1.TlsConfig), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.ManagedKafka.V1](/dotnet/docs/reference/Google.Cloud.ManagedKafka.V1/latest/Google.Cloud.ManagedKafka.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.ManagedKafka.V1.dll\n\nConstructors\n------------\n\n### TlsConfig()\n\n public TlsConfig()\n\n### TlsConfig(TlsConfig)\n\n public TlsConfig(TlsConfig other)\n\nProperties\n----------\n\n### SslPrincipalMappingRules\n\n public string SslPrincipalMappingRules { get; set; }\n\nOptional. A list of rules for mapping from SSL principal names to\nshort names. These are applied in order by Kafka.\nRefer to the Apache Kafka documentation for `ssl.principal.mapping.rules`\nfor the precise formatting details and syntax.\nExample: \"RULE:\\^CN=(.*?),OU=ServiceUsers.*$/$1@example.com/,DEFAULT\"\n\nThis is a static Kafka broker configuration. Setting or modifying this\nfield will trigger a rolling restart of the Kafka brokers to apply\nthe change. An empty string means no rules are applied (Kafka default).\n\n### TrustConfig\n\n public TrustConfig TrustConfig { get; set; }\n\nOptional. The configuration of the broker truststore. If specified, clients\ncan use mTLS for authentication."]]
