pulumi-gcp-kotlin/com.pulumi.gcp.eventarc.kotlin.inputs/PipelineDestinationAuthenticationConfigGoogleOidcArgs

PipelineDestinationAuthenticationConfigGoogleOidcArgs

data class PipelineDestinationAuthenticationConfigGoogleOidcArgs(val audience: Output<String>? = null, val serviceAccount: Output<String>) : ConvertibleToJava<PipelineDestinationAuthenticationConfigGoogleOidcArgs>

Constructors

constructor(audience: Output<String>? = null, serviceAccount: Output<String>)

Properties

audience

val audience: Output<String>? = null

Audience to be used to generate the OIDC Token. The audience claim identifies the recipient that the JWT is intended for. If unspecified, the destination URI will be used.

serviceAccount

val serviceAccount: Output<String>

Service account email used to generate the OIDC Token. The principal who calls this API must have iam.serviceAccounts.actAs permission in the service account. See https://cloud.google.com/iam/docs/understanding-service-accounts for more information. Eventarc service agents must have roles/roles/iam.serviceAccountTokenCreator role to allow the Pipeline to create OpenID tokens for authenticated requests.

Functions

toJava

open override fun toJava(): PipelineDestinationAuthenticationConfigGoogleOidcArgs