public static final class Pipeline.Destination.AuthenticationConfig.OidcToken.Builder extends GeneratedMessageV3.Builder<Pipeline.Destination.AuthenticationConfig.OidcToken.Builder> implements Pipeline.Destination.AuthenticationConfig.OidcTokenOrBuilder
Represents a config used to authenticate with a Google OIDC token using
a GCP service account. Use this authentication method to invoke your
Cloud Run and Cloud Functions destinations or HTTP endpoints that
support Google OIDC.
Protobuf type
google.cloud.eventarc.v1.Pipeline.Destination.AuthenticationConfig.OidcToken
Inherited Members
com.google.protobuf.GeneratedMessageV3.Builder.getUnknownFieldSetBuilder()
com.google.protobuf.GeneratedMessageV3.Builder.internalGetMapFieldReflection(int)
com.google.protobuf.GeneratedMessageV3.Builder.internalGetMutableMapFieldReflection(int)
com.google.protobuf.GeneratedMessageV3.Builder.mergeUnknownLengthDelimitedField(int,com.google.protobuf.ByteString)
com.google.protobuf.GeneratedMessageV3.Builder.mergeUnknownVarintField(int,int)
com.google.protobuf.GeneratedMessageV3.Builder.parseUnknownField(com.google.protobuf.CodedInputStream,com.google.protobuf.ExtensionRegistryLite,int)
com.google.protobuf.GeneratedMessageV3.Builder.setUnknownFieldSetBuilder(com.google.protobuf.UnknownFieldSet.Builder)
Static Methods
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
Methods
addRepeatedField(Descriptors.FieldDescriptor field, Object value)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder addRepeatedField(Descriptors.FieldDescriptor field, Object value)
Overrides
build()
public Pipeline.Destination.AuthenticationConfig.OidcToken build()
buildPartial()
public Pipeline.Destination.AuthenticationConfig.OidcToken buildPartial()
clear()
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder clear()
Overrides
clearAudience()
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder clearAudience()
Optional. Audience to be used to generate the OIDC Token. The
audience claim identifies the recipient that the JWT is intended for.
If unspecified, the destination URI will be used.
string audience = 2 [(.google.api.field_behavior) = OPTIONAL];
clearField(Descriptors.FieldDescriptor field)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder clearField(Descriptors.FieldDescriptor field)
Overrides
clearOneof(Descriptors.OneofDescriptor oneof)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder clearOneof(Descriptors.OneofDescriptor oneof)
Overrides
clearServiceAccount()
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder clearServiceAccount()
Required. Service account email used to generate the OIDC Token.
The principal who calls this API must have
iam.serviceAccounts.actAs permission in the service account. See
https://cloud.google.com/iam/docs/understanding-service-accounts?hl=en#sa_common
for more information. Eventarc service agents must have
roles/roles/iam.serviceAccountTokenCreator role to allow the
Pipeline to create OpenID tokens for authenticated requests.
string service_account = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
clone()
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder clone()
Overrides
getAudience()
public String getAudience()
Optional. Audience to be used to generate the OIDC Token. The
audience claim identifies the recipient that the JWT is intended for.
If unspecified, the destination URI will be used.
string audience = 2 [(.google.api.field_behavior) = OPTIONAL];
Returns |
Type |
Description |
String |
The audience.
|
getAudienceBytes()
public ByteString getAudienceBytes()
Optional. Audience to be used to generate the OIDC Token. The
audience claim identifies the recipient that the JWT is intended for.
If unspecified, the destination URI will be used.
string audience = 2 [(.google.api.field_behavior) = OPTIONAL];
Returns |
Type |
Description |
ByteString |
The bytes for audience.
|
getDefaultInstanceForType()
public Pipeline.Destination.AuthenticationConfig.OidcToken getDefaultInstanceForType()
getDescriptorForType()
public Descriptors.Descriptor getDescriptorForType()
Overrides
getServiceAccount()
public String getServiceAccount()
Required. Service account email used to generate the OIDC Token.
The principal who calls this API must have
iam.serviceAccounts.actAs permission in the service account. See
https://cloud.google.com/iam/docs/understanding-service-accounts?hl=en#sa_common
for more information. Eventarc service agents must have
roles/roles/iam.serviceAccountTokenCreator role to allow the
Pipeline to create OpenID tokens for authenticated requests.
string service_account = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
Returns |
Type |
Description |
String |
The serviceAccount.
|
getServiceAccountBytes()
public ByteString getServiceAccountBytes()
Required. Service account email used to generate the OIDC Token.
The principal who calls this API must have
iam.serviceAccounts.actAs permission in the service account. See
https://cloud.google.com/iam/docs/understanding-service-accounts?hl=en#sa_common
for more information. Eventarc service agents must have
roles/roles/iam.serviceAccountTokenCreator role to allow the
Pipeline to create OpenID tokens for authenticated requests.
string service_account = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
Returns |
Type |
Description |
ByteString |
The bytes for serviceAccount.
|
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Overrides
isInitialized()
public final boolean isInitialized()
Overrides
mergeFrom(Pipeline.Destination.AuthenticationConfig.OidcToken other)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder mergeFrom(Pipeline.Destination.AuthenticationConfig.OidcToken other)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Overrides
mergeFrom(Message other)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder mergeFrom(Message other)
Parameter |
Name |
Description |
other |
Message
|
Overrides
mergeUnknownFields(UnknownFieldSet unknownFields)
public final Pipeline.Destination.AuthenticationConfig.OidcToken.Builder mergeUnknownFields(UnknownFieldSet unknownFields)
Overrides
setAudience(String value)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder setAudience(String value)
Optional. Audience to be used to generate the OIDC Token. The
audience claim identifies the recipient that the JWT is intended for.
If unspecified, the destination URI will be used.
string audience = 2 [(.google.api.field_behavior) = OPTIONAL];
Parameter |
Name |
Description |
value |
String
The audience to set.
|
setAudienceBytes(ByteString value)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder setAudienceBytes(ByteString value)
Optional. Audience to be used to generate the OIDC Token. The
audience claim identifies the recipient that the JWT is intended for.
If unspecified, the destination URI will be used.
string audience = 2 [(.google.api.field_behavior) = OPTIONAL];
Parameter |
Name |
Description |
value |
ByteString
The bytes for audience to set.
|
setField(Descriptors.FieldDescriptor field, Object value)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder setField(Descriptors.FieldDescriptor field, Object value)
Overrides
setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
Overrides
setServiceAccount(String value)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder setServiceAccount(String value)
Required. Service account email used to generate the OIDC Token.
The principal who calls this API must have
iam.serviceAccounts.actAs permission in the service account. See
https://cloud.google.com/iam/docs/understanding-service-accounts?hl=en#sa_common
for more information. Eventarc service agents must have
roles/roles/iam.serviceAccountTokenCreator role to allow the
Pipeline to create OpenID tokens for authenticated requests.
string service_account = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
Parameter |
Name |
Description |
value |
String
The serviceAccount to set.
|
setServiceAccountBytes(ByteString value)
public Pipeline.Destination.AuthenticationConfig.OidcToken.Builder setServiceAccountBytes(ByteString value)
Required. Service account email used to generate the OIDC Token.
The principal who calls this API must have
iam.serviceAccounts.actAs permission in the service account. See
https://cloud.google.com/iam/docs/understanding-service-accounts?hl=en#sa_common
for more information. Eventarc service agents must have
roles/roles/iam.serviceAccountTokenCreator role to allow the
Pipeline to create OpenID tokens for authenticated requests.
string service_account = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
Parameter |
Name |
Description |
value |
ByteString
The bytes for serviceAccount to set.
|
setUnknownFields(UnknownFieldSet unknownFields)
public final Pipeline.Destination.AuthenticationConfig.OidcToken.Builder setUnknownFields(UnknownFieldSet unknownFields)
Overrides