- 1.53.0 (latest)
- 1.52.0
- 1.51.0
- 1.49.0
- 1.48.0
- 1.47.0
- 1.46.0
- 1.45.0
- 1.44.0
- 1.43.0
- 1.42.0
- 1.41.0
- 1.40.0
- 1.39.0
- 1.37.0
- 1.36.0
- 1.35.0
- 1.34.0
- 1.33.0
- 1.32.0
- 1.31.0
- 1.30.0
- 1.29.0
- 1.28.0
- 1.27.0
- 1.24.0
- 1.23.0
- 1.22.0
- 1.21.0
- 1.20.0
- 1.19.0
- 1.18.0
- 1.17.0
- 1.16.0
- 1.15.0
- 1.14.0
- 1.13.0
- 1.12.0
- 1.11.0
- 1.9.0
- 1.8.0
- 1.7.0
- 1.6.0
- 1.5.0
- 1.4.0
- 1.3.6
- 1.2.1
- 1.1.0
- 1.0.1
- 0.5.4
public interface AuthorityOrBuilder extends MessageOrBuilder
Implements
MessageOrBuilderMethods
getIdentityProvider()
public abstract String getIdentityProvider()
Output only. An identity provider that reflects the issuer
in the workload identity
pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
Type | Description |
String | The identityProvider. |
getIdentityProviderBytes()
public abstract ByteString getIdentityProviderBytes()
Output only. An identity provider that reflects the issuer
in the workload identity
pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
Type | Description |
ByteString | The bytes for identityProvider. |
getIssuer()
public abstract String getIssuer()
Optional. A JSON Web Token (JWT) issuer URI. issuer
must start with https://
and
be a valid URL with length <2000 characters.
If set, then Google will allow valid OIDC tokens from this issuer to
authenticate within the workload_identity_pool. OIDC discovery will be
performed on this URI to validate tokens from the issuer.
Clearing issuer
disables Workload Identity. issuer
cannot be directly
modified; it must be cleared (and Workload Identity disabled) before using
a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];
Type | Description |
String | The issuer. |
getIssuerBytes()
public abstract ByteString getIssuerBytes()
Optional. A JSON Web Token (JWT) issuer URI. issuer
must start with https://
and
be a valid URL with length <2000 characters.
If set, then Google will allow valid OIDC tokens from this issuer to
authenticate within the workload_identity_pool. OIDC discovery will be
performed on this URI to validate tokens from the issuer.
Clearing issuer
disables Workload Identity. issuer
cannot be directly
modified; it must be cleared (and Workload Identity disabled) before using
a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];
Type | Description |
ByteString | The bytes for issuer. |
getOidcJwks()
public abstract ByteString getOidcJwks()
Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517).
When this field is set, OIDC discovery will NOT be performed on issuer
,
and instead OIDC tokens will be validated using this field.
bytes oidc_jwks = 4 [(.google.api.field_behavior) = OPTIONAL];
Type | Description |
ByteString | The oidcJwks. |
getWorkloadIdentityPool()
public abstract String getWorkloadIdentityPool()
Output only. The name of the workload identity pool in which issuer
will be
recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog
,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];
Type | Description |
String | The workloadIdentityPool. |
getWorkloadIdentityPoolBytes()
public abstract ByteString getWorkloadIdentityPoolBytes()
Output only. The name of the workload identity pool in which issuer
will be
recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is {PROJECT_ID}.hub.id.goog
,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];
Type | Description |
ByteString | The bytes for workloadIdentityPool. |