--- title: "Changes to Create a HeaderCertAuth plugin" method: POST path: "/v2/control-planes/{controlPlaneId}/core-entities/plugins#HeaderCertAuth" --- # Changes to Create a HeaderCertAuth plugin `POST /v2/control-planes/{controlPlaneId}/core-entities/plugins#HeaderCertAuth` > Every recorded change to this endpoint, newest first. ## Timeline Changed in 12 of 52 revisions. - **2026-06-11** `62c54f1094bb` — 1 breaking, 1 info - **2026-04-24** `7d6a643707d9` — 1 breaking, 4 info - **2026-01-13** `ad02b4e24eb2` — 2 info - **2025-10-29** `19e869275e28` — 2 breaking - **2025-09-16** `f03059016622` — 5 breaking - **2025-08-22** `96118a9cd7f4` — 8 breaking, 30 info - **2025-07-22** `2c77aeaee5fb` — 5 breaking, 5 info - **2025-06-17** `c308b7426a7c` — 2 breaking - **2025-05-21** `69704304ad5f` — 2 info - **2025-04-15** `fc6abbc537f3` — 2 breaking, 6 info - **2025-03-05** `ceb048468954` — 2 breaking, 2 info - **2025-02-10** `d833d4dbb1fa` — 1 info ## Changes - **2026-06-11** `62c54f1094bb` — 1 breaking, 1 info - the request property `allOf[#/components/schemas/PluginBase]/partials/items/path` became required - the response property `allOf[#/components/schemas/PluginBase]/partials/items/path` became required for the status `201` - **2026-04-24** `7d6a643707d9` — 1 breaking, 4 info - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/ssl_verify` became not nullable - added the new optional request property `allOf[#/components/schemas/PluginBase]/condition` - the `ssl_verify` request property default value `false` was added - added the optional property `allOf[#/components/schemas/PluginBase]/condition` to the response with the `201` status - the `ssl_verify` response's property default value `false` was added for the status `201` - **2026-01-13** `ad02b4e24eb2` — 2 info - added the new optional request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/ssl_verify` - added the optional property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/ssl_verify` to the response with the `201` status - **2025-10-29** `19e869275e28` — 2 breaking - the `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/name` request property type/format changed from `string`/`` to ``/`` - the `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/name` response's property type/format changed from `string`/`` to ``/`` for status `201` - **2025-09-16** `f03059016622` — 5 breaking - the request property `allOf[#/components/schemas/PluginBase]/partials/items/name` became not nullable - the request property `allOf[#/components/schemas/PluginBase]/partials/items/path` became not nullable - the `allOf[#/components/schemas/PluginBase]/id` request property's minLength was increased from `0` to `1` - the `allOf[#/components/schemas/PluginBase]/name` request property's minLength was increased from `0` to `1` - the `allOf[#/components/schemas/PluginBase]/partials/items/id` request property's minLength was increased from `0` to `1` - **2025-08-22** `96118a9cd7f4` — 8 breaking, 30 info - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/anonymous` became nullable for the status `201` - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/default_consumer` became nullable for the status `201` - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/http_proxy_host` became nullable for the status `201` - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/http_proxy_port` became nullable for the status `201` - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/https_proxy_host` became nullable for the status `201` - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/https_proxy_port` became nullable for the status `201` - the response property `allOf[#/components/schemas/PluginBase]/partials/items/name` became nullable for the status `201` - the response property `allOf[#/components/schemas/PluginBase]/partials/items/path` became nullable for the status `201` - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/anonymous` became nullable - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/default_consumer` became nullable - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/http_proxy_host` became nullable - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/http_proxy_port` became nullable - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/https_proxy_host` became nullable - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/https_proxy_port` became nullable - the request property `allOf[#/components/schemas/PluginBase]/partials/items/name` became nullable - the request property `allOf[#/components/schemas/PluginBase]/partials/items/path` became nullable - the `allow_partial_chain` request property default value `false` was added - the `authenticated_group_by` request property default value `CN` was added - the `cache_ttl` request property default value `60` was added - the `cert_cache_ttl` request property default value `60000` was added - the `consumer_by` request property default value `custom_id, username` was added - the `enabled` request property default value `true` was added - the `http_timeout` request property default value `30000` was added - the `protocols` request property default value `grpc, grpcs, http, https` was added - the `revocation_check_mode` request property default value `IGNORE_CA_ERROR` was added - the `secure_source` request property default value `true` was added - the `skip_consumer_lookup` request property default value `false` was added - the `allow_partial_chain` response's property default value `false` was added for the status `201` - the `authenticated_group_by` response's property default value `CN` was added for the status `201` - the `cache_ttl` response's property default value `60` was added for the status `201` - the `cert_cache_ttl` response's property default value `60000` was added for the status `201` - the `consumer_by` response's property default value `custom_id, username` was added for the status `201` - the `enabled` response's property default value `true` was added for the status `201` - the `http_timeout` response's property default value `30000` was added for the status `201` - the `protocols` response's property default value `grpc, grpcs, http, https` was added for the status `201` - the `revocation_check_mode` response's property default value `IGNORE_CA_ERROR` was added for the status `201` - the `secure_source` response's property default value `true` was added for the status `201` - the `skip_consumer_lookup` response's property default value `false` was added for the status `201` - **2025-07-22** `2c77aeaee5fb` — 5 breaking, 5 info - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config` became required - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/ca_certificates` became required - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/certificate_header_format` became required - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/certificate_header_name` became required - the response property `allOf[#/components/schemas/PluginBase]/tags` became nullable for the status `201` - the request property `allOf[#/components/schemas/PluginBase]/tags` became nullable - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config` became required for the status `201` - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/ca_certificates` became required for the status `201` - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/certificate_header_format` became required for the status `201` - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/config/certificate_header_name` became required for the status `201` - **2025-06-17** `c308b7426a7c` — 2 breaking - the `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/protocols` request property type/format changed from `array`/`` to `array`/`set` - the `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/protocols` response's property type/format changed from `array`/`` to `array`/`set` for status `201` - **2025-05-21** `69704304ad5f` — 2 info - added the new optional request property `allOf[#/components/schemas/PluginBase]/partials` - added the optional property `allOf[#/components/schemas/PluginBase]/partials` to the response with the `201` status - **2025-04-15** `fc6abbc537f3` — 2 breaking, 6 info - the response property `allOf[#/components/schemas/PluginBase]/created_at` became nullable for the status `201` - the response property `allOf[#/components/schemas/PluginBase]/updated_at` became nullable for the status `201` - the request optional property `allOf[#/components/schemas/PluginBase]/created_at` became not read-only - the request optional property `allOf[#/components/schemas/PluginBase]/updated_at` became not read-only - the request property `allOf[#/components/schemas/PluginBase]/created_at` became nullable - the request property `allOf[#/components/schemas/PluginBase]/updated_at` became nullable - the response optional property `allOf[#/components/schemas/PluginBase]/created_at` became not read-only for the status `201` - the response optional property `allOf[#/components/schemas/PluginBase]/updated_at` became not read-only for the status `201` - **2025-03-05** `ceb048468954` — 2 breaking, 2 info - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/route` became nullable for the status `201` - the response property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/service` became nullable for the status `201` - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/route` became nullable - the request property `allOf[#/components/schemas/HeaderCertAuthPluginConfig]/service` became nullable - **2025-02-10** `d833d4dbb1fa` — 1 info - endpoint added --- [Operation](https://skmtc.dev/kong/apis/konnect-api/docs/v2/control-planes/:controlPlaneId/core-entities/plugins#HeaderCertAuth/post.md) · [API](https://skmtc.dev/kong/apis/konnect-api.md) · [Page](https://skmtc.dev/kong/apis/konnect-api/changes/v2/control-planes/:controlPlaneId/core-entities/plugins#HeaderCertAuth/post)