Class: Google::Apis::GkehubV2alpha::IdentityServiceUserConfig
- Inherits:
-
Object
- Object
- Google::Apis::GkehubV2alpha::IdentityServiceUserConfig
- Includes:
- Core::Hashable, Core::JsonObjectSupport
- Defined in:
- lib/google/apis/gkehub_v2alpha/classes.rb,
lib/google/apis/gkehub_v2alpha/representations.rb,
lib/google/apis/gkehub_v2alpha/representations.rb
Overview
Defines where users exist in the LDAP directory.
Instance Attribute Summary collapse
-
#base_dn ⇒ String
Required.
-
#filter ⇒ String
Optional.
-
#id_attribute ⇒ String
Optional.
-
#login_attribute ⇒ String
Optional.
Instance Method Summary collapse
-
#initialize(**args) ⇒ IdentityServiceUserConfig
constructor
A new instance of IdentityServiceUserConfig.
-
#update!(**args) ⇒ Object
Update properties of this object.
Constructor Details
#initialize(**args) ⇒ IdentityServiceUserConfig
Returns a new instance of IdentityServiceUserConfig.
2174 2175 2176 |
# File 'lib/google/apis/gkehub_v2alpha/classes.rb', line 2174 def initialize(**args) update!(**args) end |
Instance Attribute Details
#base_dn ⇒ String
Required. The location of the subtree in the LDAP directory to search for user
entries.
Corresponds to the JSON property baseDn
2145 2146 2147 |
# File 'lib/google/apis/gkehub_v2alpha/classes.rb', line 2145 def base_dn @base_dn end |
#filter ⇒ String
Optional. Filter to apply when searching for the user. This can be used to
further restrict the user accounts which are allowed to login. This defaults
to "(objectClass=User)".
Corresponds to the JSON property filter
2152 2153 2154 |
# File 'lib/google/apis/gkehub_v2alpha/classes.rb', line 2152 def filter @filter end |
#id_attribute ⇒ String
Optional. Determines which attribute to use as the user's identity after they
are authenticated. This is distinct from the loginAttribute field to allow
users to login with a username, but then have their actual identifier be an
email address or full Distinguished Name (DN). For example, setting
loginAttribute to "sAMAccountName" and identifierAttribute to "
userPrincipalName" would allow a user to login as "bsmith", but actual RBAC
policies for the user would be written as "bsmith@example.com". Using "
userPrincipalName" is recommended since this will be unique for each user.
This defaults to "userPrincipalName".
Corresponds to the JSON property idAttribute
2165 2166 2167 |
# File 'lib/google/apis/gkehub_v2alpha/classes.rb', line 2165 def id_attribute @id_attribute end |
#login_attribute ⇒ String
Optional. The name of the attribute which matches against the input username.
This is used to find the user in the LDAP database e.g. "(=)" and is combined
with the optional filter field. This defaults to "userPrincipalName".
Corresponds to the JSON property loginAttribute
2172 2173 2174 |
# File 'lib/google/apis/gkehub_v2alpha/classes.rb', line 2172 def login_attribute @login_attribute end |
Instance Method Details
#update!(**args) ⇒ Object
Update properties of this object
2179 2180 2181 2182 2183 2184 |
# File 'lib/google/apis/gkehub_v2alpha/classes.rb', line 2179 def update!(**args) @base_dn = args[:base_dn] if args.key?(:base_dn) @filter = args[:filter] if args.key?(:filter) @id_attribute = args[:id_attribute] if args.key?(:id_attribute) @login_attribute = args[:login_attribute] if args.key?(:login_attribute) end |