Package com.google.cloud.gkehub.v1alpha2

Class Authority

  • All Implemented Interfaces:
    AuthorityOrBuilder, com.google.protobuf.Message, com.google.protobuf.MessageLite, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, Serializable
    public final class Authority
extends com.google.protobuf.GeneratedMessageV3
implements AuthorityOrBuilder
     Authority encodes how Google will recognize identities from this Membership.
 See the workload identity documentation for more details:
 https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
    Protobuf type google.cloud.gkehub.v1alpha2.Authority
    See Also:
    Serialized Form

    • Nested Class Summary

      Nested Classes 
      Modifier and Type Class Description
      static class  Authority.Builder
      Authority encodes how Google will recognize identities from this Membership.

      • Nested classes/interfaces inherited from class com.google.protobuf.GeneratedMessageV3

        com.google.protobuf.GeneratedMessageV3.BuilderParent, com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageT extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageT>,​BuilderT extends com.google.protobuf.GeneratedMessageV3.ExtendableBuilder<MessageT,​BuilderT>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageT extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageT>>, com.google.protobuf.GeneratedMessageV3.ExtendableMessageOrBuilder<MessageT extends com.google.protobuf.GeneratedMessageV3.ExtendableMessage<MessageT>>, com.google.protobuf.GeneratedMessageV3.FieldAccessorTable, com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter

      • Nested classes/interfaces inherited from class com.google.protobuf.AbstractMessageLite

        com.google.protobuf.AbstractMessageLite.InternalOneOfEnum

    • Field Detail

      • IDENTITY_PROVIDER_FIELD_NUMBER

        public static final int IDENTITY_PROVIDER_FIELD_NUMBER
        See Also:
        Constant Field Values

      • WORKLOAD_IDENTITY_POOL_FIELD_NUMBER

        public static final int WORKLOAD_IDENTITY_POOL_FIELD_NUMBER
        See Also:
        Constant Field Values

    • Method Detail

      • newInstance

        protected Object newInstance​(com.google.protobuf.GeneratedMessageV3.UnusedPrivateParameter unused)
        Overrides:
        newInstance in class com.google.protobuf.GeneratedMessageV3

      • getDescriptor

        public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

      • internalGetFieldAccessorTable

        protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
        Specified by:
        internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3

      • getIssuer

        public String getIssuer()
         Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and
 be a valid URL with length <2000 characters.

 If set, then Google will allow valid OIDC tokens from this issuer to
 authenticate within the workload_identity_pool. OIDC discovery will be
 performed on this URI to validate tokens from the issuer, unless
 `oidc_jwks` is set.

 Clearing `issuer` disables Workload Identity. `issuer` cannot be directly
 modified; it must be cleared (and Workload Identity disabled) before using
 a new issuer (and re-enabling Workload Identity).
        string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getIssuer in interface AuthorityOrBuilder
        Returns:
        The issuer.

      • getIssuerBytes

        public com.google.protobuf.ByteString getIssuerBytes()
         Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and
 be a valid URL with length <2000 characters.

 If set, then Google will allow valid OIDC tokens from this issuer to
 authenticate within the workload_identity_pool. OIDC discovery will be
 performed on this URI to validate tokens from the issuer, unless
 `oidc_jwks` is set.

 Clearing `issuer` disables Workload Identity. `issuer` cannot be directly
 modified; it must be cleared (and Workload Identity disabled) before using
 a new issuer (and re-enabling Workload Identity).
        string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getIssuerBytes in interface AuthorityOrBuilder
        Returns:
        The bytes for issuer.

      • getOidcJwks

        public com.google.protobuf.ByteString getOidcJwks()
         Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517).

 When this field is set, OIDC discovery will NOT be performed on `issuer`,
 and instead OIDC tokens will be validated using this field.
        bytes oidc_jwks = 5 [(.google.api.field_behavior) = OPTIONAL];
        Specified by:
        getOidcJwks in interface AuthorityOrBuilder
        Returns:
        The oidcJwks.

      • getIdentityProvider

        public String getIdentityProvider()
         Output only. An identity provider that reflects the `issuer` in the workload identity
 pool.
        string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Specified by:
        getIdentityProvider in interface AuthorityOrBuilder
        Returns:
        The identityProvider.

      • getIdentityProviderBytes

        public com.google.protobuf.ByteString getIdentityProviderBytes()
         Output only. An identity provider that reflects the `issuer` in the workload identity
 pool.
        string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Specified by:
        getIdentityProviderBytes in interface AuthorityOrBuilder
        Returns:
        The bytes for identityProvider.

      • getWorkloadIdentityPool

        public String getWorkloadIdentityPool()
         Output only. The name of the workload identity pool in which `issuer` will be
 recognized.

 There is a single Workload Identity Pool per Hub that is shared
 between all Memberships that belong to that Hub. For a Hub hosted in
 {PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`,
 although this is subject to change in newer versions of this API.
        string workload_identity_pool = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Specified by:
        getWorkloadIdentityPool in interface AuthorityOrBuilder
        Returns:
        The workloadIdentityPool.

      • getWorkloadIdentityPoolBytes

        public com.google.protobuf.ByteString getWorkloadIdentityPoolBytes()
         Output only. The name of the workload identity pool in which `issuer` will be
 recognized.

 There is a single Workload Identity Pool per Hub that is shared
 between all Memberships that belong to that Hub. For a Hub hosted in
 {PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`,
 although this is subject to change in newer versions of this API.
        string workload_identity_pool = 4 [(.google.api.field_behavior) = OUTPUT_ONLY];
        Specified by:
        getWorkloadIdentityPoolBytes in interface AuthorityOrBuilder
        Returns:
        The bytes for workloadIdentityPool.

      • isInitialized

        public final boolean isInitialized()
        Specified by:
        isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
        Overrides:
        isInitialized in class com.google.protobuf.GeneratedMessageV3

      • writeTo

        public void writeTo​(com.google.protobuf.CodedOutputStream output)
             throws IOException
        Specified by:
        writeTo in interface com.google.protobuf.MessageLite
        Overrides:
        writeTo in class com.google.protobuf.GeneratedMessageV3
        Throws:
        IOException

      • getSerializedSize

        public int getSerializedSize()
        Specified by:
        getSerializedSize in interface com.google.protobuf.MessageLite
        Overrides:
        getSerializedSize in class com.google.protobuf.GeneratedMessageV3

      • equals

        public boolean equals​(Object obj)
        Specified by:
        equals in interface com.google.protobuf.Message
        Overrides:
        equals in class com.google.protobuf.AbstractMessage

      • hashCode

        public int hashCode()
        Specified by:
        hashCode in interface com.google.protobuf.Message
        Overrides:
        hashCode in class com.google.protobuf.AbstractMessage

      • parseFrom

        public static Authority parseFrom​(ByteBuffer data)
                           throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Authority parseFrom​(ByteBuffer data,
                                  com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                           throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Authority parseFrom​(com.google.protobuf.ByteString data)
                           throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Authority parseFrom​(com.google.protobuf.ByteString data,
                                  com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                           throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Authority parseFrom​(byte[] data)
                           throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Authority parseFrom​(byte[] data,
                                  com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                           throws com.google.protobuf.InvalidProtocolBufferException
        Throws:
        com.google.protobuf.InvalidProtocolBufferException

      • parseFrom

        public static Authority parseFrom​(com.google.protobuf.CodedInputStream input,
                                  com.google.protobuf.ExtensionRegistryLite extensionRegistry)
                           throws IOException
        Throws:
        IOException

      • newBuilderForType

        public Authority.Builder newBuilderForType()
        Specified by:
        newBuilderForType in interface com.google.protobuf.Message
        Specified by:
        newBuilderForType in interface com.google.protobuf.MessageLite

      • toBuilder

        public Authority.Builder toBuilder()
        Specified by:
        toBuilder in interface com.google.protobuf.Message
        Specified by:
        toBuilder in interface com.google.protobuf.MessageLite

      • newBuilderForType

        protected Authority.Builder newBuilderForType​(com.google.protobuf.GeneratedMessageV3.BuilderParent parent)
        Specified by:
        newBuilderForType in class com.google.protobuf.GeneratedMessageV3

      • getDefaultInstance

        public static Authority getDefaultInstance()

      • parser

        public static com.google.protobuf.Parser<Authority> parser()

      • getParserForType

        public com.google.protobuf.Parser<Authority> getParserForType()
        Specified by:
        getParserForType in interface com.google.protobuf.Message
        Specified by:
        getParserForType in interface com.google.protobuf.MessageLite
        Overrides:
        getParserForType in class com.google.protobuf.GeneratedMessageV3

      • getDefaultInstanceForType

        public Authority getDefaultInstanceForType()
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
        Specified by:
        getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder