Identity
data class IdentityServiceOidcConfigArgs(val certificateAuthorityData: Output<String>? = null, val clientId: Output<String>? = null, val clientSecret: Output<String>? = null, val deployCloudConsoleProxy: Output<Boolean>? = null, val enableAccessToken: Output<Boolean>? = null, val extraParams: Output<String>? = null, val groupPrefix: Output<String>? = null, val groupsClaim: Output<String>? = null, val issuerUri: Output<String>? = null, val kubectlRedirectUri: Output<String>? = null, val scopes: Output<String>? = null, val userClaim: Output<String>? = null, val userPrefix: Output<String>? = null) : ConvertibleToJava<IdentityServiceOidcConfigArgs>
Configuration for OIDC Auth flow.
Constructors
Link copied to clipboard
constructor(certificateAuthorityData: Output<String>? = null, clientId: Output<String>? = null, clientSecret: Output<String>? = null, deployCloudConsoleProxy: Output<Boolean>? = null, enableAccessToken: Output<Boolean>? = null, extraParams: Output<String>? = null, groupPrefix: Output<String>? = null, groupsClaim: Output<String>? = null, issuerUri: Output<String>? = null, kubectlRedirectUri: Output<String>? = null, scopes: Output<String>? = null, userClaim: Output<String>? = null, userPrefix: Output<String>? = null)
Properties
Link copied to clipboard
PEM-encoded CA for OIDC provider.
Link copied to clipboard
Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
Link copied to clipboard
Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
Link copied to clipboard
Enable access token.
Link copied to clipboard
Comma-separated list of key-value pairs.
Link copied to clipboard
Prefix to prepend to group name.
Link copied to clipboard
Claim in OIDC ID token that holds group information.
Link copied to clipboard
Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
Link copied to clipboard
Prefix to prepend to user name.