# GatewayTlsConfigV1 Properties

- Package: [Aspire.Hosting.Kubernetes](/reference/api/csharp/aspire.hosting.kubernetes.md)
- Type: [GatewayTlsConfigV1](/reference/api/csharp/aspire.hosting.kubernetes/gatewaytlsconfigv1.md)
- Kind: `Properties`
- Members: `2`

TLS configuration for a Gateway listener.

## CertificateRefs

- Name: `CertificateRefs`
- Modifiers: `get`
- Returns: [List<GatewayCertificateRefV1>](/reference/api/csharp/aspire.hosting.kubernetes/gatewaycertificaterefv1.md)
- Source: [GitHub](https://github.com/microsoft/aspire/blob/5bd693ae1897dee5e2ce71c2cc08879c1c7eff51/src/Aspire.Hosting.Kubernetes/Resources/GatewayV1.cs#L103)

Gets the certificate references for TLS termination.

```csharp
public List<GatewayCertificateRefV1> CertificateRefs { get; }
```

## Mode

- Name: `Mode`
- Modifiers: `get; set`
- Returns: `string`
- Source: [GitHub](https://github.com/microsoft/aspire/blob/5bd693ae1897dee5e2ce71c2cc08879c1c7eff51/src/Aspire.Hosting.Kubernetes/Resources/GatewayV1.cs)

Gets or sets the TLS mode. Common values are `"Terminate"` (Gateway decrypts) and `"Passthrough"` (backend decrypts).

```csharp
public string Mode { get; set; }
```