Class: Google::Apis::GkehubV1::Authority

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/gkehub_v1/classes.rb,
lib/google/apis/gkehub_v1/representations.rb,
lib/google/apis/gkehub_v1/representations.rb

Overview

Authority encodes how Google will recognize identities from this Membership. See the workload identity documentation for more details: https://cloud.google. com/kubernetes-engine/docs/how-to/workload-identity

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ Authority

Returns a new instance of Authority.



129
130
131
 
# File 'lib/google/apis/gkehub_v1/classes.rb', line 129

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#identity_provider ⇒ String

Output only. An identity provider that reflects the issuer in the workload identity pool. Corresponds to the JSON property identityProvider

Returns:

  • (String) 


106
107
108
 
# File 'lib/google/apis/gkehub_v1/classes.rb', line 106

def identity_provider
  @identity_provider
end

#issuer ⇒ String

Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and be a valid URL with length <2000 characters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing issuer disables Workload Identity. issuer cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity). Corresponds to the JSON property issuer

Returns:

  • (String) 


118
119
120
 
# File 'lib/google/apis/gkehub_v1/classes.rb', line 118

def issuer
  @issuer
end

#workload_identity_pool ⇒ String

Output only. The name of the workload identity pool in which issuer will be recognized. There is a single Workload Identity Pool per Hub that is shared between all Memberships that belong to that Hub. For a Hub hosted in PROJECT_ID, the workload pool format is `PROJECT_ID.hub.id.goog, although this is subject to change in newer versions of this API. Corresponds to the JSON propertyworkloadIdentityPool`

Returns:

  • (String) 


127
128
129
 
# File 'lib/google/apis/gkehub_v1/classes.rb', line 127

def workload_identity_pool
  @workload_identity_pool
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



134
135
136
137
138
 
# File 'lib/google/apis/gkehub_v1/classes.rb', line 134

def update!(**args)
  @identity_provider = args[:identity_provider] if args.key?(:identity_provider)
  @issuer = args[:issuer] if args.key?(:issuer)
  @workload_identity_pool = args[:workload_identity_pool] if args.key?(:workload_identity_pool)
end