Google Cloud Container V1 Client - Class UserManagedKeysConfig (2.2.0)

Reference documentation and code samples for the Google Cloud Container V1 Client class UserManagedKeysConfig.

UserManagedKeysConfig holds the resource address to Keys which are used for signing certs and token that are used for communication within cluster.

Generated from protobuf message google.container.v1.UserManagedKeysConfig

Namespace

Google \ Cloud \ Container \ V1

Methods

__construct

Constructor.

Parameters
Name Description
data array

Optional. Data for populating the Message object.

↳ cluster_ca string

The Certificate Authority Service caPool to use for the cluster CA in this cluster.

↳ etcd_api_ca string

Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.

↳ etcd_peer_ca string

Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.

↳ service_account_signing_keys array

The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster. Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}

↳ service_account_verification_keys array

The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster. Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}

↳ aggregation_ca string

The Certificate Authority Service caPool to use for the aggregation CA in this cluster.

↳ control_plane_disk_encryption_key string

The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.

↳ gkeops_etcd_backup_encryption_key string

Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.

getClusterCa

The Certificate Authority Service caPool to use for the cluster CA in this cluster.

Returns
Type Description
string

setClusterCa

The Certificate Authority Service caPool to use for the cluster CA in this cluster.

Parameter
Name Description
var string
Returns
Type Description
$this

getEtcdApiCa

Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.

Returns
Type Description
string

setEtcdApiCa

Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.

Parameter
Name Description
var string
Returns
Type Description
$this

getEtcdPeerCa

Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.

Returns
Type Description
string

setEtcdPeerCa

Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.

Parameter
Name Description
var string
Returns
Type Description
$this

getServiceAccountSigningKeys

The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster.

Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setServiceAccountSigningKeys

The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster.

Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}

Parameter
Name Description
var string[]
Returns
Type Description
$this

getServiceAccountVerificationKeys

The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster.

Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}

Returns
Type Description
Google\Protobuf\Internal\RepeatedField

setServiceAccountVerificationKeys

The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster.

Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}

Parameter
Name Description
var string[]
Returns
Type Description
$this

getAggregationCa

The Certificate Authority Service caPool to use for the aggregation CA in this cluster.

Returns
Type Description
string

setAggregationCa

The Certificate Authority Service caPool to use for the aggregation CA in this cluster.

Parameter
Name Description
var string
Returns
Type Description
$this

getControlPlaneDiskEncryptionKey

The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.

Returns
Type Description
string

setControlPlaneDiskEncryptionKey

The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.

Parameter
Name Description
var string
Returns
Type Description
$this

getGkeopsEtcdBackupEncryptionKey

Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.

Returns
Type Description
string

setGkeopsEtcdBackupEncryptionKey

Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.

Parameter
Name Description
var string
Returns
Type Description
$this