Interface AuthorityOrBuilder (1.23.0)

Version 1.23.0

• 1.53.0 (latest)
• 1.52.0
• 1.51.0
• 1.49.0
• 1.48.0
• 1.47.0
• 1.46.0
• 1.45.0
• 1.44.0
• 1.43.0
• 1.42.0
• 1.41.0
• 1.40.0
• 1.39.0
• 1.37.0
• 1.36.0
• 1.35.0
• 1.34.0
• 1.33.0
• 1.32.0
• 1.31.0
• 1.30.0
• 1.29.0
• 1.28.0
• 1.27.0
• 1.24.0
• 1.23.0
• 1.22.0
• 1.21.0
• 1.20.0
• 1.19.0
• 1.18.0
• 1.17.0
• 1.16.0
• 1.15.0
• 1.14.0
• 1.13.0
• 1.12.0
• 1.11.0
• 1.9.0
• 1.8.0
• 1.7.0
• 1.6.0
• 1.5.0
• 1.4.0
• 1.3.6
• 1.2.1
• 1.1.0
• 1.0.1
• 0.5.4

public interface AuthorityOrBuilder extends MessageOrBuilder

Implements

MessageOrBuilder

Methods

getIdentityProvider()

public abstract String getIdentityProvider()

Output only. An identity provider that reflects the issuer in the workload identity pool.

string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type	Description
String	The identityProvider.

getIdentityProviderBytes()

public abstract ByteString getIdentityProviderBytes()

Output only. An identity provider that reflects the issuer in the workload identity pool.

string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type	Description
ByteString	The bytes for identityProvider.

getIssuer()

public abstract String getIssuer()

Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and be a valid URL with length <2000 characters.

If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer, unless oidc_jwks is set.

Clearing issuer disables Workload Identity. issuer cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).

string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type	Description
String	The issuer.

getIssuerBytes()

public abstract ByteString getIssuerBytes()

Optional. A JSON Web Token (JWT) issuer URI. issuer must start with https:// and be a valid URL with length <2000 characters.

If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer, unless oidc_jwks is set.

Clearing issuer disables Workload Identity. issuer cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).

string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type	Description
ByteString	The bytes for issuer.

getOidcJwks()

public abstract ByteString getOidcJwks()

Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517).

When this field is set, OIDC discovery will NOT be performed on issuer, and instead OIDC tokens will be validated using this field.

bytes oidc_jwks = 5 [(.google.api.field_behavior) = OPTIONAL];

Returns
Type	Description
ByteString	The oidcJwks.

getWorkloadIdentityPool()

public abstract String getWorkloadIdentityPool()

Output only. The name of the workload identity pool in which issuer will be recognized.

There is a single Workload Identity Pool per Hub that is shared between all Memberships that belong to that Hub. For a Hub hosted in {PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog, although this is subject to change in newer versions of this API.

string workload_identity_pool = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type	Description
String	The workloadIdentityPool.

getWorkloadIdentityPoolBytes()

public abstract ByteString getWorkloadIdentityPoolBytes()

Output only. The name of the workload identity pool in which issuer will be recognized.

There is a single Workload Identity Pool per Hub that is shared between all Memberships that belong to that Hub. For a Hub hosted in {PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog, although this is subject to change in newer versions of this API.

string workload_identity_pool = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];

Returns
Type	Description
ByteString	The bytes for workloadIdentityPool.