public sealed class Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken : IMessage<Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken>, IEquatable<Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken>, IDeepCloneable<Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken>, IBufferMessage, IMessage
Reference documentation and code samples for the Eventarc v1 API class Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken.
Represents a config used to authenticate with a Google OIDC token using a GCP service account. Use this authentication method to invoke your Cloud Run and Cloud Functions destinations or HTTP endpoints that support Google OIDC.
Implements
IMessagePipelineTypesDestinationTypesAuthenticationConfigTypesOidcToken, IEquatablePipelineTypesDestinationTypesAuthenticationConfigTypesOidcToken, IDeepCloneablePipelineTypesDestinationTypesAuthenticationConfigTypesOidcToken, IBufferMessage, IMessageNamespace
Google.Cloud.Eventarc.V1Assembly
Google.Cloud.Eventarc.V1.dll
Constructors
OidcToken()
public OidcToken()
OidcToken(OidcToken)
public OidcToken(Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken other)
Parameter | |
---|---|
Name | Description |
other |
PipelineTypesDestinationTypesAuthenticationConfigTypesOidcToken |
Properties
Audience
public string Audience { get; set; }
Optional. Audience to be used to generate the OIDC Token. The audience claim identifies the recipient that the JWT is intended for. If unspecified, the destination URI will be used.
Property Value | |
---|---|
Type | Description |
string |
ServiceAccount
public string ServiceAccount { get; set; }
Required. Service account email used to generate the OIDC Token. The principal who calls this API must have iam.serviceAccounts.actAs permission in the service account. See https://cloud.google.com/iam/docs/understanding-service-accounts?hl=en#sa_common for more information. Eventarc service agents must have roles/roles/iam.serviceAccountTokenCreator role to allow the Pipeline to create OpenID tokens for authenticated requests.
Property Value | |
---|---|
Type | Description |
string |
ServiceAccountAsServiceAccountName
public ServiceAccountName ServiceAccountAsServiceAccountName { get; set; }
ServiceAccountName-typed view over the ServiceAccount resource name property.
Property Value | |
---|---|
Type | Description |
ServiceAccountName |