Conditions represent the latest available observation of the resource's current state.
conditions[]
object
conditions[].lastTransitionTime
string
Last time the condition transitioned from one status to another.
conditions[].message
string
Human-readable message indicating details about last transition.
conditions[].reason
string
Unique, one-word, CamelCase reason for the condition's last transition.
conditions[].status
string
Status is the status of the condition. Can be True, False, Unknown.
conditions[].type
string
Type is the type of the condition.
observedGeneration
integer
ObservedGeneration is the generation of the resource that was most recently observed by the Config Connector controller. If this is equal to metadata.generation, then that means that the current reported status reflects the most recent desired state of the resource.
orgInternalOnly
boolean
Output only. Whether the brand is only intended for usage inside the G Suite organization only.
Sample YAML(s)
Typical Use Case
# Copyright 2020 Google LLC## Licensed under the Apache License, Version 2.0 (the "License");# you may not use this file except in compliance with the License.# You may obtain a copy of the License at## http://www.apache.org/licenses/LICENSE-2.0## Unless required by applicable law or agreed to in writing, software# distributed under the License is distributed on an "AS IS" BASIS,# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.# See the License for the specific language governing permissions and# limitations under the License.apiVersion:iap.cnrm.cloud.google.com/v1beta1kind:IAPBrandmetadata:name:iapbrand-samplespec:applicationTitle:"testbrand"supportEmail:"support@example.com"
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eIAP Brands can only be created once per Google Cloud project, and they cannot be deleted or patched via the underlying Google API, meaning deleting via Config Connector will only remove it from the cluster, not Google Cloud.\u003c/p\u003e\n"],["\u003cp\u003eThe IAM service account used by Config Connector must be the owner of the Google Group whose email address is set as the brand's support email.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eIAPBrand\u003c/code\u003e resource manages the creation of a brand in Identity-Aware Proxy (IAP), utilizing \u003ccode\u003eiap.googleapis.com\u003c/code\u003e as its Config Connector service.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eapplicationTitle\u003c/code\u003e, \u003ccode\u003eresourceID\u003c/code\u003e, and \u003ccode\u003esupportEmail\u003c/code\u003e fields are immutable once set, and are used to specify the application name and support email that are displayed on the OAuth consent screen.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eorgInternalOnly\u003c/code\u003e field in status indicates if the brand is intended for use within a G Suite organization, and \u003ccode\u003econditions\u003c/code\u003e in status details the resource's current state, last transition time, message, reason, and status.\u003c/p\u003e\n"]]],[],null,["# IAPBrand\n========\n\n*** ** * ** ***\n\n| **Note:** Brands can only be created once for a Google Cloud project and the underlying Google API doesn't not support DELETE or PATCH methods. Deleting a Brand managed by Config Connector will remove it from your cluster but will not delete it from Google Cloud.\n| **Note:** The Identity and Access Management (IAM) service account used by Config Connector to authenticate with Google Cloud APIs has to be the owner of the Google Group whose email address will be used as the support email of the brand. See [the IAP user guide\\]](/iap/docs/programmatic-oauth-clients#support-email) for details.\n\nCustom Resource Definition Properties\n-------------------------------------\n\n### Annotations\n\n### Spec\n\n#### Schema\n\n applicationTitle: string\n resourceID: string\n supportEmail: string\n\n### Status\n\n#### Schema\n\n conditions:\n - lastTransitionTime: string\n message: string\n reason: string\n status: string\n type: string\n observedGeneration: integer\n orgInternalOnly: boolean\n\nSample YAML(s)\n--------------\n\n### Typical Use Case\n\n # Copyright 2020 Google LLC\n #\n # Licensed under the Apache License, Version 2.0 (the \"License\");\n # you may not use this file except in compliance with the License.\n # You may obtain a copy of the License at\n #\n # http://www.apache.org/licenses/LICENSE-2.0\n #\n # Unless required by applicable law or agreed to in writing, software\n # distributed under the License is distributed on an \"AS IS\" BASIS,\n # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n # See the License for the specific language governing permissions and\n # limitations under the License.\n\n apiVersion: iap.cnrm.cloud.google.com/v1beta1\n kind: IAPBrand\n metadata:\n name: iapbrand-sample\n spec:\n applicationTitle: \"test brand\"\n supportEmail: \"support@example.com\"\n\n| **Note:** If you have any trouble with instantiating the resource, refer to [Troubleshoot Config Connector](/config-connector/docs/troubleshooting)."]]
