Method: projects.locations.clusters.getJwks

Gets the public component of the cluster signing keys in JSON Web Key format.

HTTP request

GET https://container.googleapis.com/v1/{parent=projects/*/locations/*/clusters/*}/jwks

The URL uses gRPC Transcoding syntax.

Path parameters

Parameters
parent

string

The cluster (project, location, cluster name) to get keys for. Specified in the format projects/*/locations/*/clusters/*.

Request body

The request body must be empty.

Response body

GetJSONWebKeysResponse is a valid JSON Web Key Set as specififed in rfc 7517

If successful, the response body contains data with the following structure:

JSON representation
{
  "keys": [
    {
      object (Jwk)
    }
  ],
  "cacheHeader": {
    object (HttpCacheControlResponseHeader)
  }
}
Fields
keys[]

object (Jwk)

The public component of the keys used by the cluster to sign token requests.

cacheHeader

object (HttpCacheControlResponseHeader)

OnePlatform automatically extracts this field and uses it to set the HTTP Cache-Control header.

Jwk

Jwk is a JSON Web Key as specified in RFC 7517

JSON representation
{
  "kty": string,
  "alg": string,
  "use": string,
  "kid": string,
  "n": string,
  "e": string,
  "x": string,
  "y": string,
  "crv": string
}
Fields
kty

string

Key Type.

alg

string

Algorithm.

use

string

Permitted uses for the public keys.

kid

string

Key ID.

n

string

Used for RSA keys.

e

string

Used for RSA keys.

x

string

Used for ECDSA keys.

y

string

Used for ECDSA keys.

crv

string

Used for ECDSA keys.