Class: Google::Apis::EventarcV1::GoogleCloudEventarcV1PipelineDestinationAuthenticationConfigOidcToken

Inherits:

Object

• Object
• Google::Apis::EventarcV1::GoogleCloudEventarcV1PipelineDestinationAuthenticationConfigOidcToken

Includes:

Core::Hashable, Core::JsonObjectSupport

Defined in:

lib/google/apis/eventarc_v1/classes.rb,
lib/google/apis/eventarc_v1/representations.rb,
lib/google/apis/eventarc_v1/representations.rb

Overview

Represents a config used to authenticate with a Google OIDC token using a GCP service account. Use this authentication method to invoke your Cloud Run and Cloud Functions destinations or HTTP endpoints that support Google OIDC.

Instance Attribute Summary

• #audience ⇒ String

  Optional.

• #service_account ⇒ String

  Required.

Instance Method Summary

• #initialize(**args) ⇒ GoogleCloudEventarcV1PipelineDestinationAuthenticationConfigOidcToken constructor

  A new instance of GoogleCloudEventarcV1PipelineDestinationAuthenticationConfigOidcToken.

• #update!(**args) ⇒ Object

  Update properties of this object.

Constructor Details

#initialize(**args) ⇒ GoogleCloudEventarcV1PipelineDestinationAuthenticationConfigOidcToken

Returns a new instance of GoogleCloudEventarcV1PipelineDestinationAuthenticationConfigOidcToken.

# File 'lib/google/apis/eventarc_v1/classes.rb', line 1038

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#audience ⇒ String

Optional. Audience to be used to generate the OIDC Token. The audience claim identifies the recipient that the JWT is intended for. If unspecified, the destination URI will be used. Corresponds to the JSON property audience

Returns:

• (String)

# File 'lib/google/apis/eventarc_v1/classes.rb', line 1026

def audience
  @audience
end

#service_account ⇒ String

Required. Service account email used to generate the OIDC Token. The principal who calls this API must have iam.serviceAccounts.actAs permission in the service account. See https://cloud.google.com/iam/docs/understanding-service- accounts?hl=en#sa_common for more information. Eventarc service agents must have roles/roles/iam.serviceAccountTokenCreator role to allow the Pipeline to create OpenID tokens for authenticated requests. Corresponds to the JSON property serviceAccount

Returns:

• (String)

# File 'lib/google/apis/eventarc_v1/classes.rb', line 1036

def service_account
  @service_account
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object

# File 'lib/google/apis/eventarc_v1/classes.rb', line 1043

def update!(**args)
  @audience = args[:audience] if args.key?(:audience)
  @service_account = args[:service_account] if args.key?(:service_account)
end