public static final class Authority.Builder extends GeneratedMessageV3.Builder<Authority.Builder> implements AuthorityOrBuilderAuthority encodes how Google will recognize identities from this Membership. See the workload identity documentation for more details: https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
Protobuf type google.cloud.gkehub.v1alpha2.Authority
Inheritance
Object > AbstractMessageLite.Builder<MessageType,BuilderType> > AbstractMessage.Builder<BuilderType> > GeneratedMessageV3.Builder > Authority.BuilderImplements
AuthorityOrBuilderStatic Methods
getDescriptor()
public static final Descriptors.Descriptor getDescriptor()| Type | Description |
| Descriptor |
Methods
addRepeatedField(Descriptors.FieldDescriptor field, Object value)
public Authority.Builder addRepeatedField(Descriptors.FieldDescriptor field, Object value)| Name | Description |
| field | FieldDescriptor |
| value | Object |
| Type | Description |
| Authority.Builder |
build()
public Authority build()| Type | Description |
| Authority |
buildPartial()
public Authority buildPartial()| Type | Description |
| Authority |
clear()
public Authority.Builder clear()| Type | Description |
| Authority.Builder |
clearField(Descriptors.FieldDescriptor field)
public Authority.Builder clearField(Descriptors.FieldDescriptor field)| Name | Description |
| field | FieldDescriptor |
| Type | Description |
| Authority.Builder |
clearIdentityProvider()
public Authority.Builder clearIdentityProvider() Output only. An identity provider that reflects the issuer in the workload identity
pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Type | Description |
| Authority.Builder | This builder for chaining. |
clearIssuer()
public Authority.Builder clearIssuer() Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and
be a valid URL with length <2000 characters.
If set, then Google will allow valid OIDC tokens from this issuer to
authenticate within the workload_identity_pool. OIDC discovery will be
performed on this URI to validate tokens from the issuer, unless
oidc_jwks is set.
Clearing issuer disables Workload Identity. issuer cannot be directly
modified; it must be cleared (and Workload Identity disabled) before using
a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];
| Type | Description |
| Authority.Builder | This builder for chaining. |
clearOidcJwks()
public Authority.Builder clearOidcJwks() Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517).
When this field is set, OIDC discovery will NOT be performed on issuer,
and instead OIDC tokens will be validated using this field.
bytes oidc_jwks = 5 [(.google.api.field_behavior) = OPTIONAL];
| Type | Description |
| Authority.Builder | This builder for chaining. |
clearOneof(Descriptors.OneofDescriptor oneof)
public Authority.Builder clearOneof(Descriptors.OneofDescriptor oneof)| Name | Description |
| oneof | OneofDescriptor |
| Type | Description |
| Authority.Builder |
clearWorkloadIdentityPool()
public Authority.Builder clearWorkloadIdentityPool() Output only. The name of the workload identity pool in which issuer will be
recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Type | Description |
| Authority.Builder | This builder for chaining. |
clone()
public Authority.Builder clone()| Type | Description |
| Authority.Builder |
getDefaultInstanceForType()
public Authority getDefaultInstanceForType()| Type | Description |
| Authority |
getDescriptorForType()
public Descriptors.Descriptor getDescriptorForType()| Type | Description |
| Descriptor |
getIdentityProvider()
public String getIdentityProvider() Output only. An identity provider that reflects the issuer in the workload identity
pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Type | Description |
| String | The identityProvider. |
getIdentityProviderBytes()
public ByteString getIdentityProviderBytes() Output only. An identity provider that reflects the issuer in the workload identity
pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Type | Description |
| ByteString | The bytes for identityProvider. |
getIssuer()
public String getIssuer() Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and
be a valid URL with length <2000 characters.
If set, then Google will allow valid OIDC tokens from this issuer to
authenticate within the workload_identity_pool. OIDC discovery will be
performed on this URI to validate tokens from the issuer, unless
oidc_jwks is set.
Clearing issuer disables Workload Identity. issuer cannot be directly
modified; it must be cleared (and Workload Identity disabled) before using
a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];
| Type | Description |
| String | The issuer. |
getIssuerBytes()
public ByteString getIssuerBytes() Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and
be a valid URL with length <2000 characters.
If set, then Google will allow valid OIDC tokens from this issuer to
authenticate within the workload_identity_pool. OIDC discovery will be
performed on this URI to validate tokens from the issuer, unless
oidc_jwks is set.
Clearing issuer disables Workload Identity. issuer cannot be directly
modified; it must be cleared (and Workload Identity disabled) before using
a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];
| Type | Description |
| ByteString | The bytes for issuer. |
getOidcJwks()
public ByteString getOidcJwks() Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517).
When this field is set, OIDC discovery will NOT be performed on issuer,
and instead OIDC tokens will be validated using this field.
bytes oidc_jwks = 5 [(.google.api.field_behavior) = OPTIONAL];
| Type | Description |
| ByteString | The oidcJwks. |
getWorkloadIdentityPool()
public String getWorkloadIdentityPool() Output only. The name of the workload identity pool in which issuer will be
recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Type | Description |
| String | The workloadIdentityPool. |
getWorkloadIdentityPoolBytes()
public ByteString getWorkloadIdentityPoolBytes() Output only. The name of the workload identity pool in which issuer will be
recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Type | Description |
| ByteString | The bytes for workloadIdentityPool. |
internalGetFieldAccessorTable()
protected GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()| Type | Description |
| FieldAccessorTable |
isInitialized()
public final boolean isInitialized()| Type | Description |
| boolean |
mergeFrom(Authority other)
public Authority.Builder mergeFrom(Authority other)| Name | Description |
| other | Authority |
| Type | Description |
| Authority.Builder |
mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)
public Authority.Builder mergeFrom(CodedInputStream input, ExtensionRegistryLite extensionRegistry)| Name | Description |
| input | CodedInputStream |
| extensionRegistry | ExtensionRegistryLite |
| Type | Description |
| Authority.Builder |
| Type | Description |
| IOException |
mergeFrom(Message other)
public Authority.Builder mergeFrom(Message other)| Name | Description |
| other | Message |
| Type | Description |
| Authority.Builder |
mergeUnknownFields(UnknownFieldSet unknownFields)
public final Authority.Builder mergeUnknownFields(UnknownFieldSet unknownFields)| Name | Description |
| unknownFields | UnknownFieldSet |
| Type | Description |
| Authority.Builder |
setField(Descriptors.FieldDescriptor field, Object value)
public Authority.Builder setField(Descriptors.FieldDescriptor field, Object value)| Name | Description |
| field | FieldDescriptor |
| value | Object |
| Type | Description |
| Authority.Builder |
setIdentityProvider(String value)
public Authority.Builder setIdentityProvider(String value) Output only. An identity provider that reflects the issuer in the workload identity
pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Name | Description |
| value | StringThe identityProvider to set. |
| Type | Description |
| Authority.Builder | This builder for chaining. |
setIdentityProviderBytes(ByteString value)
public Authority.Builder setIdentityProviderBytes(ByteString value) Output only. An identity provider that reflects the issuer in the workload identity
pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Name | Description |
| value | ByteStringThe bytes for identityProvider to set. |
| Type | Description |
| Authority.Builder | This builder for chaining. |
setIssuer(String value)
public Authority.Builder setIssuer(String value) Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and
be a valid URL with length <2000 characters.
If set, then Google will allow valid OIDC tokens from this issuer to
authenticate within the workload_identity_pool. OIDC discovery will be
performed on this URI to validate tokens from the issuer, unless
oidc_jwks is set.
Clearing issuer disables Workload Identity. issuer cannot be directly
modified; it must be cleared (and Workload Identity disabled) before using
a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];
| Name | Description |
| value | StringThe issuer to set. |
| Type | Description |
| Authority.Builder | This builder for chaining. |
setIssuerBytes(ByteString value)
public Authority.Builder setIssuerBytes(ByteString value) Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and
be a valid URL with length <2000 characters.
If set, then Google will allow valid OIDC tokens from this issuer to
authenticate within the workload_identity_pool. OIDC discovery will be
performed on this URI to validate tokens from the issuer, unless
oidc_jwks is set.
Clearing issuer disables Workload Identity. issuer cannot be directly
modified; it must be cleared (and Workload Identity disabled) before using
a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];
| Name | Description |
| value | ByteStringThe bytes for issuer to set. |
| Type | Description |
| Authority.Builder | This builder for chaining. |
setOidcJwks(ByteString value)
public Authority.Builder setOidcJwks(ByteString value) Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517).
When this field is set, OIDC discovery will NOT be performed on issuer,
and instead OIDC tokens will be validated using this field.
bytes oidc_jwks = 5 [(.google.api.field_behavior) = OPTIONAL];
| Name | Description |
| value | ByteStringThe oidcJwks to set. |
| Type | Description |
| Authority.Builder | This builder for chaining. |
setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)
public Authority.Builder setRepeatedField(Descriptors.FieldDescriptor field, int index, Object value)| Name | Description |
| field | FieldDescriptor |
| index | int |
| value | Object |
| Type | Description |
| Authority.Builder |
setUnknownFields(UnknownFieldSet unknownFields)
public final Authority.Builder setUnknownFields(UnknownFieldSet unknownFields)| Name | Description |
| unknownFields | UnknownFieldSet |
| Type | Description |
| Authority.Builder |
setWorkloadIdentityPool(String value)
public Authority.Builder setWorkloadIdentityPool(String value) Output only. The name of the workload identity pool in which issuer will be
recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Name | Description |
| value | StringThe workloadIdentityPool to set. |
| Type | Description |
| Authority.Builder | This builder for chaining. |
setWorkloadIdentityPoolBytes(ByteString value)
public Authority.Builder setWorkloadIdentityPoolBytes(ByteString value) Output only. The name of the workload identity pool in which issuer will be
recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
| Name | Description |
| value | ByteStringThe bytes for workloadIdentityPool to set. |
| Type | Description |
| Authority.Builder | This builder for chaining. |