Anthos Multi-Cloud v1 API - Class AttachedOidcConfig (2.1.0)

public sealed class AttachedOidcConfig : IMessage<AttachedOidcConfig>, IEquatable<AttachedOidcConfig>, IDeepCloneable<AttachedOidcConfig>, IBufferMessage, IMessage

Reference documentation and code samples for the Anthos Multi-Cloud v1 API class AttachedOidcConfig.

OIDC discovery information of the target cluster.

Kubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster API server. This fields indicates how GCP services validate KSA tokens in order to allow system workloads (such as GKE Connect and telemetry agents) to authenticate back to GCP.

Both clusters with public and private issuer URLs are supported. Clusters with public issuers only need to specify the issuer_url field while clusters with private issuers need to provide both issuer_url and oidc_jwks.

Inheritance

Object > AttachedOidcConfig

Implements

IMessage<AttachedOidcConfig>, IEquatable<AttachedOidcConfig>, IDeepCloneable<AttachedOidcConfig>, IBufferMessage, IMessage

Inherited Members

Object.GetHashCode()

Object.GetType()

Object.MemberwiseClone()

Object.ToString()

Namespace

Google.Cloud.GkeMultiCloud.V1

Assembly

Google.Cloud.GkeMultiCloud.V1.dll

Constructors

AttachedOidcConfig()

public AttachedOidcConfig()

AttachedOidcConfig(AttachedOidcConfig)

public AttachedOidcConfig(AttachedOidcConfig other)

Parameter
Name	Description
`other`	`AttachedOidcConfig`

Properties

IssuerUrl

public string IssuerUrl { get; set; }

A JSON Web Token (JWT) issuer URI. issuer must start with https://.

Property Value
Type	Description
`String`

Jwks

public ByteString Jwks { get; set; }

Optional. OIDC verification keys in JWKS format (RFC 7517). It contains a list of OIDC verification keys that can be used to verify OIDC JWTs.

This field is required for cluster that doesn't have a publicly available discovery endpoint. When provided, it will be directly used to verify the OIDC JWT asserted by the IDP.

Property Value
Type	Description
`ByteString`