GoogleApi.Container.V1.Model.UserManagedKeysConfig (google_api_container v0.57.0)

View Source

UserManagedKeysConfig holds the resource address to Keys which are used for signing certs and token that are used for communication within cluster.

Attributes

  • aggregationCa (type: String.t, default: nil) - The Certificate Authority Service caPool to use for the aggregation CA in this cluster.
  • clusterCa (type: String.t, default: nil) - The Certificate Authority Service caPool to use for the cluster CA in this cluster.
  • controlPlaneDiskEncryptionKey (type: String.t, default: nil) - The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.
  • etcdApiCa (type: String.t, default: nil) - Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.
  • etcdPeerCa (type: String.t, default: nil) - Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.
  • gkeopsEtcdBackupEncryptionKey (type: String.t, default: nil) - Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.
  • serviceAccountSigningKeys (type: list(String.t), default: nil) - The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster. Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}
  • serviceAccountVerificationKeys (type: list(String.t), default: nil) - The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster. Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}

Summary

Types

t()

Functions

decode(value, options)

Unwrap a decoded JSON object into its complex fields.

Types

t()

@type t() :: %GoogleApi.Container.V1.Model.UserManagedKeysConfig{
  aggregationCa: String.t() | nil,
  clusterCa: String.t() | nil,
  controlPlaneDiskEncryptionKey: String.t() | nil,
  etcdApiCa: String.t() | nil,
  etcdPeerCa: String.t() | nil,
  gkeopsEtcdBackupEncryptionKey: String.t() | nil,
  serviceAccountSigningKeys: [String.t()] | nil,
  serviceAccountVerificationKeys: [String.t()] | nil
}

Functions

decode(value, options)

@spec decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.