pulumi-gcp-kotlin/com.pulumi.gcp.iam.kotlin.inputs/WorkloadIdentityPoolProviderOidcArgs

WorkloadIdentityPoolProviderOidcArgs

data class WorkloadIdentityPoolProviderOidcArgs(val allowedAudiences: Output<List<String>>? = null, val issuerUri: Output<String>, val jwksJson: Output<String>? = null) : ConvertibleToJava<WorkloadIdentityPoolProviderOidcArgs>

Constructors

constructor(allowedAudiences: Output<List<String>>? = null, issuerUri: Output<String>, jwksJson: Output<String>? = null)

Properties

allowedAudiences

val allowedAudiences: Output<List<String>>? = null

Acceptable values for the aud field (audience) in the OIDC token. Token exchange requests are rejected if the token audience does not match one of the configured values. Each audience may be at most 256 characters. A maximum of 10 audiences may be configured. If this list is empty, the OIDC token audience must be equal to the full canonical resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix. For example:

issuerUri

val issuerUri: Output<String>

The OIDC issuer URL.

jwksJson

val jwksJson: Output<String>? = null

OIDC JWKs in JSON String format. For details on definition of a JWK, see https:tools.ietf.org/html/rfc7517. If not set, then we use the jwks_uri from the discovery document fetched from the .well-known path for the issuer_uri. Currently, RSA and EC asymmetric keys are supported. The JWK must use following format and include only the following fields:

Functions

toJava

open override fun toJava(): WorkloadIdentityPoolProviderOidcArgs