OidcArgs

data class OidcArgs(val allowedAudiences: Output<List<String>>? = null, val issuerUri: Output<String>) : ConvertibleToJava<OidcArgs>

Represents an OpenId Connect 1.0 identity provider.

Constructors

Link copied to clipboard
fun OidcArgs(allowedAudiences: Output<List<String>>? = null, issuerUri: Output<String>)

Functions

Link copied to clipboard
open override fun toJava(): OidcArgs

Properties

Link copied to clipboard
val allowedAudiences: Output<List<String>>? = null

Acceptable values for the aud field (audience) in the OIDC token. Token exchange requests are rejected if the token audience does not match one of the configured values. Each audience may be at most 256 characters. A maximum of 10 audiences may be configured. If this list is empty, the OIDC token audience must be equal to the full canonical resource name of the WorkloadIdentityPoolProvider, with or without the HTTPS prefix. For example: `` //iam.googleapis.com/projects//locations//workloadIdentityPools//providers/ https://iam.googleapis.com/projects//locations//workloadIdentityPools//providers/ `` @property issuerUri The OIDC issuer URL. Must be an HTTPS endpoint.

Link copied to clipboard
val issuerUri: Output<String>