GKE Hub v1 API - Class Authority (2.4.0)

public sealed class Authority : IMessage<Authority>, IEquatable<Authority>, IDeepCloneable<Authority>, IBufferMessage, IMessage

Reference documentation and code samples for the GKE Hub v1 API class Authority.

Authority encodes how Google will recognize identities from this Membership. See the workload identity documentation for more details: https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

Inheritance

object > Authority

Implements

IMessage Authority, IEquatable Authority, IDeepCloneable Authority, IBufferMessage, IMessage

Inherited Members

object.GetHashCode()

object.GetType()

object.ToString()

Namespace

Google.Cloud.GkeHub.V1

Assembly

Google.Cloud.GkeHub.V1.dll

Constructors

Authority()

public Authority()

Authority(Authority)

public Authority(Authority other)

Parameter
Name	Description
`other`	`Authority`

Properties

IdentityProvider

public string IdentityProvider { get; set; }

Output only. An identity provider that reflects the issuer in the workload identity pool.

Property Value
Type	Description
`string`

Issuer

public string Issuer { get; set; }

Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and be a valid URL with length <2000 characters.

If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer.

Clearing issuer disables Workload Identity. issuer cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).

Property Value
Type	Description
`string`

OidcJwks

public ByteString OidcJwks { get; set; }

Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517).

When this field is set, OIDC discovery will NOT be performed on issuer, and instead OIDC tokens will be validated using this field.

Property Value
Type	Description
`ByteString`

WorkloadIdentityPool

public string WorkloadIdentityPool { get; set; }

Output only. The name of the workload identity pool in which issuer will be recognized.

There is a single Workload Identity Pool per Hub that is shared between all Memberships that belong to that Hub. For a Hub hosted in {PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog, although this is subject to change in newer versions of this API.

Property Value
Type	Description
`string`