public static final class Authority.Builder extends com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder> implements AuthorityOrBuilder
Authority encodes how Google will recognize identities from this Membership. See the workload identity documentation for more details: https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identityProtobuf type
google.cloud.gkehub.v1beta1.Authority| Modifier and Type | Method and Description |
|---|---|
Authority.Builder |
addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
Authority |
build() |
Authority |
buildPartial() |
Authority.Builder |
clear() |
Authority.Builder |
clearField(com.google.protobuf.Descriptors.FieldDescriptor field) |
Authority.Builder |
clearIdentityProvider()
Output only.
|
Authority.Builder |
clearIssuer()
Optional.
|
Authority.Builder |
clearOidcJwks()
Optional.
|
Authority.Builder |
clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof) |
Authority.Builder |
clearWorkloadIdentityPool()
Output only.
|
Authority.Builder |
clone() |
Authority |
getDefaultInstanceForType() |
static com.google.protobuf.Descriptors.Descriptor |
getDescriptor() |
com.google.protobuf.Descriptors.Descriptor |
getDescriptorForType() |
String |
getIdentityProvider()
Output only.
|
com.google.protobuf.ByteString |
getIdentityProviderBytes()
Output only.
|
String |
getIssuer()
Optional.
|
com.google.protobuf.ByteString |
getIssuerBytes()
Optional.
|
com.google.protobuf.ByteString |
getOidcJwks()
Optional.
|
String |
getWorkloadIdentityPool()
Output only.
|
com.google.protobuf.ByteString |
getWorkloadIdentityPoolBytes()
Output only.
|
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable |
internalGetFieldAccessorTable() |
boolean |
isInitialized() |
Authority.Builder |
mergeFrom(Authority other) |
Authority.Builder |
mergeFrom(com.google.protobuf.CodedInputStream input,
com.google.protobuf.ExtensionRegistryLite extensionRegistry) |
Authority.Builder |
mergeFrom(com.google.protobuf.Message other) |
Authority.Builder |
mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
Authority.Builder |
setField(com.google.protobuf.Descriptors.FieldDescriptor field,
Object value) |
Authority.Builder |
setIdentityProvider(String value)
Output only.
|
Authority.Builder |
setIdentityProviderBytes(com.google.protobuf.ByteString value)
Output only.
|
Authority.Builder |
setIssuer(String value)
Optional.
|
Authority.Builder |
setIssuerBytes(com.google.protobuf.ByteString value)
Optional.
|
Authority.Builder |
setOidcJwks(com.google.protobuf.ByteString value)
Optional.
|
Authority.Builder |
setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field,
int index,
Object value) |
Authority.Builder |
setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields) |
Authority.Builder |
setWorkloadIdentityPool(String value)
Output only.
|
Authority.Builder |
setWorkloadIdentityPoolBytes(com.google.protobuf.ByteString value)
Output only.
|
getAllFields, getField, getFieldBuilder, getOneofFieldDescriptor, getParentForChildren, getRepeatedField, getRepeatedFieldBuilder, getRepeatedFieldCount, getUnknownFields, getUnknownFieldSetBuilder, hasField, hasOneof, internalGetMapField, internalGetMapFieldReflection, internalGetMutableMapField, internalGetMutableMapFieldReflection, isClean, markClean, mergeUnknownLengthDelimitedField, mergeUnknownVarintField, newBuilderForField, onBuilt, onChanged, parseUnknownField, setUnknownFieldSetBuilder, setUnknownFieldsProto3findInitializationErrors, getInitializationErrorString, internalMergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, mergeFrom, newUninitializedMessageException, toStringaddAll, addAll, mergeDelimitedFrom, mergeDelimitedFrom, newUninitializedMessageExceptionequals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, waitpublic static final com.google.protobuf.Descriptors.Descriptor getDescriptor()
protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public Authority.Builder clear()
clear in interface com.google.protobuf.Message.Builderclear in interface com.google.protobuf.MessageLite.Builderclear in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
getDescriptorForType in interface com.google.protobuf.Message.BuildergetDescriptorForType in interface com.google.protobuf.MessageOrBuildergetDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public Authority getDefaultInstanceForType()
getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuildergetDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilderpublic Authority build()
build in interface com.google.protobuf.Message.Builderbuild in interface com.google.protobuf.MessageLite.Builderpublic Authority buildPartial()
buildPartial in interface com.google.protobuf.Message.BuilderbuildPartial in interface com.google.protobuf.MessageLite.Builderpublic Authority.Builder clone()
clone in interface com.google.protobuf.Message.Builderclone in interface com.google.protobuf.MessageLite.Builderclone in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public Authority.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
setField in interface com.google.protobuf.Message.BuildersetField in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public Authority.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
clearField in interface com.google.protobuf.Message.BuilderclearField in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public Authority.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
clearOneof in interface com.google.protobuf.Message.BuilderclearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public Authority.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value)
setRepeatedField in interface com.google.protobuf.Message.BuildersetRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public Authority.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
addRepeatedField in interface com.google.protobuf.Message.BuilderaddRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public Authority.Builder mergeFrom(com.google.protobuf.Message other)
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<Authority.Builder>public Authority.Builder mergeFrom(Authority other)
public final boolean isInitialized()
isInitialized in interface com.google.protobuf.MessageLiteOrBuilderisInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public Authority.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
mergeFrom in interface com.google.protobuf.Message.BuildermergeFrom in interface com.google.protobuf.MessageLite.BuildermergeFrom in class com.google.protobuf.AbstractMessage.Builder<Authority.Builder>IOExceptionpublic String getIssuer()
Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and be a valid URL with length <2000 characters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing `issuer` disables Workload Identity. `issuer` cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];getIssuer in interface AuthorityOrBuilderpublic com.google.protobuf.ByteString getIssuerBytes()
Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and be a valid URL with length <2000 characters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing `issuer` disables Workload Identity. `issuer` cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];getIssuerBytes in interface AuthorityOrBuilderpublic Authority.Builder setIssuer(String value)
Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and be a valid URL with length <2000 characters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing `issuer` disables Workload Identity. `issuer` cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];value - The issuer to set.public Authority.Builder clearIssuer()
Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and be a valid URL with length <2000 characters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing `issuer` disables Workload Identity. `issuer` cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];public Authority.Builder setIssuerBytes(com.google.protobuf.ByteString value)
Optional. A JSON Web Token (JWT) issuer URI. `issuer` must start with `https://` and be a valid URL with length <2000 characters. If set, then Google will allow valid OIDC tokens from this issuer to authenticate within the workload_identity_pool. OIDC discovery will be performed on this URI to validate tokens from the issuer. Clearing `issuer` disables Workload Identity. `issuer` cannot be directly modified; it must be cleared (and Workload Identity disabled) before using a new issuer (and re-enabling Workload Identity).
string issuer = 1 [(.google.api.field_behavior) = OPTIONAL];value - The bytes for issuer to set.public String getWorkloadIdentityPool()
Output only. The name of the workload identity pool in which `issuer` will
be recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];getWorkloadIdentityPool in interface AuthorityOrBuilderpublic com.google.protobuf.ByteString getWorkloadIdentityPoolBytes()
Output only. The name of the workload identity pool in which `issuer` will
be recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];getWorkloadIdentityPoolBytes in interface AuthorityOrBuilderpublic Authority.Builder setWorkloadIdentityPool(String value)
Output only. The name of the workload identity pool in which `issuer` will
be recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];value - The workloadIdentityPool to set.public Authority.Builder clearWorkloadIdentityPool()
Output only. The name of the workload identity pool in which `issuer` will
be recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];public Authority.Builder setWorkloadIdentityPoolBytes(com.google.protobuf.ByteString value)
Output only. The name of the workload identity pool in which `issuer` will
be recognized.
There is a single Workload Identity Pool per Hub that is shared
between all Memberships that belong to that Hub. For a Hub hosted in
{PROJECT_ID}, the workload pool format is `{PROJECT_ID}.hub.id.goog`,
although this is subject to change in newer versions of this API.
string workload_identity_pool = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];value - The bytes for workloadIdentityPool to set.public String getIdentityProvider()
Output only. An identity provider that reflects the `issuer` in the workload identity pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];getIdentityProvider in interface AuthorityOrBuilderpublic com.google.protobuf.ByteString getIdentityProviderBytes()
Output only. An identity provider that reflects the `issuer` in the workload identity pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];getIdentityProviderBytes in interface AuthorityOrBuilderpublic Authority.Builder setIdentityProvider(String value)
Output only. An identity provider that reflects the `issuer` in the workload identity pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];value - The identityProvider to set.public Authority.Builder clearIdentityProvider()
Output only. An identity provider that reflects the `issuer` in the workload identity pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];public Authority.Builder setIdentityProviderBytes(com.google.protobuf.ByteString value)
Output only. An identity provider that reflects the `issuer` in the workload identity pool.
string identity_provider = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];value - The bytes for identityProvider to set.public com.google.protobuf.ByteString getOidcJwks()
Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517). When this field is set, OIDC discovery will NOT be performed on `issuer`, and instead OIDC tokens will be validated using this field.
bytes oidc_jwks = 4 [(.google.api.field_behavior) = OPTIONAL];getOidcJwks in interface AuthorityOrBuilderpublic Authority.Builder setOidcJwks(com.google.protobuf.ByteString value)
Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517). When this field is set, OIDC discovery will NOT be performed on `issuer`, and instead OIDC tokens will be validated using this field.
bytes oidc_jwks = 4 [(.google.api.field_behavior) = OPTIONAL];value - The oidcJwks to set.public Authority.Builder clearOidcJwks()
Optional. OIDC verification keys for this Membership in JWKS format (RFC 7517). When this field is set, OIDC discovery will NOT be performed on `issuer`, and instead OIDC tokens will be validated using this field.
bytes oidc_jwks = 4 [(.google.api.field_behavior) = OPTIONAL];public final Authority.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
setUnknownFields in interface com.google.protobuf.Message.BuildersetUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>public final Authority.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
mergeUnknownFields in interface com.google.protobuf.Message.BuildermergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<Authority.Builder>Copyright © 2025 Google LLC. All rights reserved.