Class: Google::Apis::GkehubV1beta::Authority

Inherits:
Object
  • Object
show all
Includes:
Core::Hashable, Core::JsonObjectSupport
Defined in:
lib/google/apis/gkehub_v1beta/classes.rb,
lib/google/apis/gkehub_v1beta/representations.rb,
lib/google/apis/gkehub_v1beta/representations.rb

Overview

Authority encodes how Google will recognize identities from this Membership. See the workload identity documentation for more details: https://cloud.google. com/kubernetes-engine/docs/how-to/workload-identity

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(**args) ⇒ Authority

Returns a new instance of Authority.



256
257
258
 
# File 'lib/google/apis/gkehub_v1beta/classes.rb', line 256

def initialize(**args)
   update!(**args)
end

Instance Attribute Details

#identity_provider ⇒ String

Output only. An identity provider that reflects the issuer in the workload identity pool. Corresponds to the JSON property identityProvider

Returns:

  • (String) 


213
214
215
 
# File 'lib/google/apis/gkehub_v1beta/classes.rb', line 213

def identity_provider
  @identity_provider
end

#issuer ⇒ String

Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and be a valid URL with length <2000 characters, it must use location rather than zone for GKE clusters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing issuer disables Workload Identity. issuer cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity). Corresponds to the JSON property issuer

Returns:

  • (String) 


225
226
227
 
# File 'lib/google/apis/gkehub_v1beta/classes.rb', line 225

def issuer
  @issuer
end

#oidc_jwks ⇒ String

Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517). When this field is set, OIDC discovery will NOT be performed on issuer, and instead OIDC tokens will be validated using this field. Corresponds to the JSON property oidcJwks NOTE: Values are automatically base64 encoded/decoded in the client library.

Returns:

  • (String) 


233
234
235
 
# File 'lib/google/apis/gkehub_v1beta/classes.rb', line 233

def oidc_jwks
  @oidc_jwks
end

#scope_tenancy_identity_provider ⇒ String

Optional. Output only. The identity provider for the scope-tenancy workload identity pool. Corresponds to the JSON property scopeTenancyIdentityProvider

Returns:

  • (String) 


239
240
241
 
# File 'lib/google/apis/gkehub_v1beta/classes.rb', line 239

def scope_tenancy_identity_provider
  @scope_tenancy_identity_provider
end

#scope_tenancy_workload_identity_pool ⇒ String

Optional. Output only. The name of the scope-tenancy workload identity pool. This pool is set in the fleet-level feature. Corresponds to the JSON property scopeTenancyWorkloadIdentityPool

Returns:

  • (String) 


245
246
247
 
# File 'lib/google/apis/gkehub_v1beta/classes.rb', line 245

def scope_tenancy_workload_identity_pool
  @scope_tenancy_workload_identity_pool
end

#workload_identity_pool ⇒ String

Output only. The name of the workload identity pool in which issuer will be recognized. There is a single Workload Identity Pool per Hub that is shared between all Memberships that belong to that Hub. For a Hub hosted in PROJECT_ID, the workload pool format is `PROJECT_ID.hub.id.goog, although this is subject to change in newer versions of this API. Corresponds to the JSON propertyworkloadIdentityPool`

Returns:

  • (String) 


254
255
256
 
# File 'lib/google/apis/gkehub_v1beta/classes.rb', line 254

def workload_identity_pool
  @workload_identity_pool
end

Instance Method Details

#update!(**args) ⇒ Object

Update properties of this object



261
262
263
264
265
266
267
268
 
# File 'lib/google/apis/gkehub_v1beta/classes.rb', line 261

def update!(**args)
  @identity_provider = args[:identity_provider] if args.key?(:identity_provider)
  @issuer = args[:issuer] if args.key?(:issuer)
  @oidc_jwks = args[:oidc_jwks] if args.key?(:oidc_jwks)
  @scope_tenancy_identity_provider = args[:scope_tenancy_identity_provider] if args.key?(:scope_tenancy_identity_provider)
  @scope_tenancy_workload_identity_pool = args[:scope_tenancy_workload_identity_pool] if args.key?(:scope_tenancy_workload_identity_pool)
  @workload_identity_pool = args[:workload_identity_pool] if args.key?(:workload_identity_pool)
end