View Source GoogleApi.GKEHub.V1.Model.IdentityServiceOidcConfig (google_api_gke_hub v0.16.0)

Configuration for OIDC Auth flow.

Attributes

  • certificateAuthorityData (type: String.t, default: nil) - PEM-encoded CA for OIDC provider.
  • clientId (type: String.t, default: nil) - ID for OIDC client application.
  • clientSecret (type: String.t, default: nil) - Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
  • deployCloudConsoleProxy (type: boolean(), default: nil) - Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
  • enableAccessToken (type: boolean(), default: nil) - Enable access token.
  • encryptedClientSecret (type: String.t, default: nil) - Output only. Encrypted OIDC Client secret
  • extraParams (type: String.t, default: nil) - Comma-separated list of key-value pairs.
  • groupPrefix (type: String.t, default: nil) - Prefix to prepend to group name.
  • groupsClaim (type: String.t, default: nil) - Claim in OIDC ID token that holds group information.
  • issuerUri (type: String.t, default: nil) - URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
  • kubectlRedirectUri (type: String.t, default: nil) - Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
  • scopes (type: String.t, default: nil) - Comma-separated list of identifiers.
  • userClaim (type: String.t, default: nil) - Claim in OIDC ID token that holds username.
  • userPrefix (type: String.t, default: nil) - Prefix to prepend to user name.

Summary

Functions

Unwrap a decoded JSON object into its complex fields.

Types

@type t() :: %GoogleApi.GKEHub.V1.Model.IdentityServiceOidcConfig{
  certificateAuthorityData: String.t() | nil,
  clientId: String.t() | nil,
  clientSecret: String.t() | nil,
  deployCloudConsoleProxy: boolean() | nil,
  enableAccessToken: boolean() | nil,
  encryptedClientSecret: String.t() | nil,
  extraParams: String.t() | nil,
  groupPrefix: String.t() | nil,
  groupsClaim: String.t() | nil,
  issuerUri: String.t() | nil,
  kubectlRedirectUri: String.t() | nil,
  scopes: String.t() | nil,
  userClaim: String.t() | nil,
  userPrefix: String.t() | nil
}

Functions

@spec decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.