Class: Google::Apis::AiplatformV1beta1::GoogleCloudAiplatformV1beta1AuthConfigOidcConfig

Inherits:

Object

• Object
• Google::Apis::AiplatformV1beta1::GoogleCloudAiplatformV1beta1AuthConfigOidcConfig

Includes:

Core::Hashable, Core::JsonObjectSupport

Defined in:

lib/google/apis/aiplatform_v1beta1/classes.rb,
lib/google/apis/aiplatform_v1beta1/representations.rb,
lib/google/apis/aiplatform_v1beta1/representations.rb

Overview

Config for user OIDC auth.

Instance Attribute Summary

• #id_token ⇒ String

  OpenID Connect formatted ID token for extension endpoint.

• #service_account ⇒ String

  The service account used to generate an OpenID Connect (OIDC)-compatible JWT token signed by the Google OIDC Provider (accounts.google.com) for extension endpoint (https://cloud.google.com/iam/docs/create-short-lived-credentials- direct#sa-credentials-oidc).

Instance Method Summary

• #initialize(**args) ⇒ GoogleCloudAiplatformV1beta1AuthConfigOidcConfig constructor

  A new instance of GoogleCloudAiplatformV1beta1AuthConfigOidcConfig.

• #update!(**args) ⇒ Object

  Update properties of this object.

Constructor Details

#initialize(**args) ⇒ GoogleCloudAiplatformV1beta1AuthConfigOidcConfig

Returns a new instance of GoogleCloudAiplatformV1beta1AuthConfigOidcConfig.

# File 'lib/google/apis/aiplatform_v1beta1/classes.rb', line 1239

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#id_token ⇒ String

OpenID Connect formatted ID token for extension endpoint. Only used to propagate token from [[ExecuteExtensionRequest.runtime_auth_config]] at request time. Corresponds to the JSON property idToken

Returns:

• (String)

# File 'lib/google/apis/aiplatform_v1beta1/classes.rb', line 1225

def id_token
  @id_token
end

#service_account ⇒ String

The service account used to generate an OpenID Connect (OIDC)-compatible JWT token signed by the Google OIDC Provider (accounts.google.com) for extension endpoint (https://cloud.google.com/iam/docs/create-short-lived-credentials- direct#sa-credentials-oidc). - The audience for the token will be set to the URL in the server url defined in the OpenApi spec. - If the service account is provided, the service account should grant iam.serviceAccounts.getOpenIdToken permission to Vertex AI Extension Service Agent (https://cloud.google.com/ vertex-ai/docs/general/access-control#service-agents). Corresponds to the JSON property serviceAccount

Returns:

• (String)

# File 'lib/google/apis/aiplatform_v1beta1/classes.rb', line 1237

def service_account
  @service_account
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object

# File 'lib/google/apis/aiplatform_v1beta1/classes.rb', line 1244

def update!(**args)
  @id_token = args[:id_token] if args.key?(:id_token)
  @service_account = args[:service_account] if args.key?(:service_account)
end