Method: projects.locations.awsClusters.generateAwsAccessToken

Generates a short-lived access token to authenticate to a given AwsCluster resource.

HTTP request

GET https://{endpoint}/v1/{awsCluster=projects/*/locations/*/awsClusters/*}:generateAwsAccessToken

Where {endpoint} is one of the supported service endpoints.

The URLs use gRPC Transcoding syntax.

Path parameters

Parameters
awsCluster

string

Required. The name of the AwsCluster resource to authenticate to.

AwsCluster names are formatted as projects/<project-id>/locations/<region>/awsClusters/<cluster-id>.

See Resource Names for more details on Google Cloud resource names.

Request body

The request body must be empty.

Response body

Response message for AwsClusters.GenerateAwsAccessToken method.

If successful, the response body contains data with the following structure:

JSON representation 
{
  "accessToken": string,
  "expirationTime": string
}
Fields
accessToken

string

Output only. Access token to authenticate to k8s api-server.
expirationTime

string (Timestamp format)

Output only. Timestamp at which the token will expire.

Uses RFC 3339, where generated output will always be Z-normalized and uses 0, 3, 6 or 9 fractional digits. Offsets other than "Z" are also accepted. Examples: "2014-10-02T15:01:23Z", "2014-10-02T15:01:23.045123456Z" or "2014-10-02T15:01:23+05:30".

Authorization scopes

Requires the following OAuth scope:

  • https://www.googleapis.com/auth/cloud-platform

For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the awsCluster resource:

  • gkemulticloud.awsClusters.generateAccessToken

For more information, see the IAM documentation.