public static final class AttachedOidcConfig.Builder extends GeneratedMessageV3.Builder<AttachedOidcConfig.Builder> implements AttachedOidcConfigOrBuilder
OIDC discovery information of the target cluster.
Kubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster
API server. This fields indicates how Google Cloud Platform services
validate KSA tokens in order to allow system workloads (such as GKE Connect
and telemetry agents) to authenticate back to Google Cloud Platform.
Both clusters with public and private issuer URLs are supported.
Clusters with public issuers only need to specify the issuer_url
field
while clusters with private issuers need to provide both
issuer_url
and oidc_jwks
.
Protobuf type google.cloud.gkemulticloud.v1.AttachedOidcConfig
Inherited Members
com.google.protobuf.GeneratedMessageV3.Builder.getUnknownFieldSetBuilder()
com.google.protobuf.GeneratedMessageV3.Builder.mergeUnknownLengthDelimitedField(int,com.google.protobuf.ByteString)
com.google.protobuf.GeneratedMessageV3.Builder.mergeUnknownVarintField(int,int)
com.google.protobuf.GeneratedMessageV3.Builder.parseUnknownField(com.google.protobuf.CodedInputStream,com.google.protobuf.ExtensionRegistryLite,int)
com.google.protobuf.GeneratedMessageV3.Builder.setUnknownFieldSetBuilder(com.google.protobuf.UnknownFieldSet.Builder)
Static Methods
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()
Methods
addRepeatedField(Descriptors.FieldDescriptor field, Object value)
public AttachedOidcConfig.Builder addRepeatedField(Descriptors.FieldDescriptor field, Object value)
Overrides
build()
public AttachedOidcConfig build()
buildPartial()
public AttachedOidcConfig buildPartial()
clear()
public AttachedOidcConfig.Builder clear()
Overrides
clearField(Descriptors.FieldDescriptor field)
public AttachedOidcConfig.Builder clearField(Descriptors.FieldDescriptor field)
Overrides
clearIssuerUrl()
public AttachedOidcConfig.Builder clearIssuerUrl()
A JSON Web Token (JWT) issuer URI. issuer
must start with https://
.
string issuer_url = 1;
clearJwks()
public AttachedOidcConfig.Builder clearJwks()
Optional. OIDC verification keys in JWKS format (RFC 7517).
It contains a list of OIDC verification keys that can be used to verify
OIDC JWTs.
This field is required for cluster that doesn't have a publicly available
discovery endpoint. When provided, it will be directly used
to verify the OIDC JWT asserted by the IDP.
bytes jwks = 2 [(.google.api.field_behavior) = OPTIONAL];
clearOneof(Descriptors.OneofDescriptor oneof)
public AttachedOidcConfig.Builder clearOneof(Descriptors.OneofDescriptor oneof)
Overrides
clone()
public AttachedOidcConfig.Builder clone()
Overrides
getDefaultInstanceForType()
public AttachedOidcConfig getDefaultInstanceForType()
getDescriptorForType()
public Descriptors.Descriptor getDescriptorForType()
Overrides
getIssuerUrl()
public String getIssuerUrl()
A JSON Web Token (JWT) issuer URI. issuer
must start with https://
.
string issuer_url = 1;
Returns |
---|
Type | Description |
String | The issuerUrl.
|
getIssuerUrlBytes()
public ByteString getIssuerUrlBytes()
A JSON Web Token (JWT) issuer URI. issuer
must start with https://
.
string issuer_url = 1;
Returns |
---|
Type | Description |
ByteString | The bytes for issuerUrl.
|
getJwks()
public ByteString getJwks()
Optional. OIDC verification keys in JWKS format (RFC 7517).
It contains a list of OIDC verification keys that can be used to verify
OIDC JWTs.
This field is required for cluster that doesn't have a publicly available
discovery endpoint. When provided, it will be directly used
to verify the OIDC JWT asserted by the IDP.
bytes jwks = 2 [(.google.api.field_behavior) = OPTIONAL];
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
Overrides
isInitialized()
public final boolean isInitialized()
Overrides
mergeFrom(AttachedOidcConfig other)
public AttachedOidcConfig.Builder mergeFrom(AttachedOidcConfig other)
public AttachedOidcConfig.Builder mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
Overrides
mergeFrom(Message other)
public AttachedOidcConfig.Builder mergeFrom(Message other)
Parameter |
---|
Name | Description |
other | Message
|
Overrides
mergeUnknownFields(UnknownFieldSet unknownFields)
public final AttachedOidcConfig.Builder mergeUnknownFields(UnknownFieldSet unknownFields)
Overrides
setField(Descriptors.FieldDescriptor field, Object value)
public AttachedOidcConfig.Builder setField(Descriptors.FieldDescriptor field, Object value)
Overrides
setIssuerUrl(String value)
public AttachedOidcConfig.Builder setIssuerUrl(String value)
A JSON Web Token (JWT) issuer URI. issuer
must start with https://
.
string issuer_url = 1;
Parameter |
---|
Name | Description |
value | String
The issuerUrl to set.
|
setIssuerUrlBytes(ByteString value)
public AttachedOidcConfig.Builder setIssuerUrlBytes(ByteString value)
A JSON Web Token (JWT) issuer URI. issuer
must start with https://
.
string issuer_url = 1;
Parameter |
---|
Name | Description |
value | ByteString
The bytes for issuerUrl to set.
|
setJwks(ByteString value)
public AttachedOidcConfig.Builder setJwks(ByteString value)
Optional. OIDC verification keys in JWKS format (RFC 7517).
It contains a list of OIDC verification keys that can be used to verify
OIDC JWTs.
This field is required for cluster that doesn't have a publicly available
discovery endpoint. When provided, it will be directly used
to verify the OIDC JWT asserted by the IDP.
bytes jwks = 2 [(.google.api.field_behavior) = OPTIONAL];
Parameter |
---|
Name | Description |
value | ByteString
The jwks to set.
|
setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
public AttachedOidcConfig.Builder setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
Overrides
setUnknownFields(UnknownFieldSet unknownFields)
public final AttachedOidcConfig.Builder setUnknownFields(UnknownFieldSet unknownFields)
Overrides