Output only. Base64-encoded public certificate used by clients to
authenticate to the cluster endpoint. Issued only if
client_certificate_config is set.
public ClientCertificateConfig ClientCertificateConfig { get; set; }
Configuration for client certificate authentication on the cluster. For
clusters before v1.12, if no configuration is specified, a client
certificate is issued.
The password to use for HTTP basic authentication to the master endpoint.
Because the master endpoint is open to the Internet, you should create a
strong password. If a password is provided for cluster creation, username
must be non-empty.
The username to use for HTTP basic authentication to the master endpoint.
For clusters v1.6.0 and later, basic authentication can be disabled by
leaving username unspecified (or setting it to the empty string).
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eThe latest version available for the \u003ccode\u003eGoogle.Cloud.Container.V1.MasterAuth\u003c/code\u003e class is 3.33.0, with numerous older versions also available for reference, down to version 2.3.0.\u003c/p\u003e\n"],["\u003cp\u003e\u003ccode\u003eMasterAuth\u003c/code\u003e provides authentication information for accessing the master endpoint in Google Kubernetes Engine v1 API, and it supports both HTTP basic authentication and client certificates.\u003c/p\u003e\n"],["\u003cp\u003eThe \u003ccode\u003eMasterAuth\u003c/code\u003e class implements \u003ccode\u003eIMessage\u003c/code\u003e, \u003ccode\u003eIEquatable\u003c/code\u003e, \u003ccode\u003eIDeepCloneable\u003c/code\u003e, and \u003ccode\u003eIBufferMessage\u003c/code\u003e interfaces, offering methods for message manipulation, equality checks, deep cloning, and buffer management.\u003c/p\u003e\n"],["\u003cp\u003eProperties of the \u003ccode\u003eMasterAuth\u003c/code\u003e class include \u003ccode\u003eClientCertificate\u003c/code\u003e, \u003ccode\u003eClientCertificateConfig\u003c/code\u003e, \u003ccode\u003eClientKey\u003c/code\u003e, and \u003ccode\u003eClusterCaCertificate\u003c/code\u003e, providing details about the certificates used for authentication to the cluster endpoint.\u003c/p\u003e\n"],["\u003cp\u003eHTTP basic authentication is deprecated for master endpoints, and for clusters v1.6.0 and later, basic authentication can be disabled, and the password property is now obsolete.\u003c/p\u003e\n"]]],[],null,["# Google Kubernetes Engine v1 API - Class MasterAuth (3.35.0)\n\nVersion latestkeyboard_arrow_down\n\n- [3.35.0 (latest)](/dotnet/docs/reference/Google.Cloud.Container.V1/latest/Google.Cloud.Container.V1.MasterAuth)\n- [3.34.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.34.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.33.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.33.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.32.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.32.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.31.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.31.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.30.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.30.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.29.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.29.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.28.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.28.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.27.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.27.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.26.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.26.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.25.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.25.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.24.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.24.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.23.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.23.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.22.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.22.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.21.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.21.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.20.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.20.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.19.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.19.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.18.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.18.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.17.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.17.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.16.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.16.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.15.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.15.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.14.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.14.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.13.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.13.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.12.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.12.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.11.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.11.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.10.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.10.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.9.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.9.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.8.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.8.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.7.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.7.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.6.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.6.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.5.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.5.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.4.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.4.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.3.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.3.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.2.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.2.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.1.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.1.0/Google.Cloud.Container.V1.MasterAuth)\n- [3.0.0](/dotnet/docs/reference/Google.Cloud.Container.V1/3.0.0/Google.Cloud.Container.V1.MasterAuth)\n- [2.7.0](/dotnet/docs/reference/Google.Cloud.Container.V1/2.7.0/Google.Cloud.Container.V1.MasterAuth)\n- [2.6.0](/dotnet/docs/reference/Google.Cloud.Container.V1/2.6.0/Google.Cloud.Container.V1.MasterAuth)\n- [2.5.0](/dotnet/docs/reference/Google.Cloud.Container.V1/2.5.0/Google.Cloud.Container.V1.MasterAuth)\n- [2.4.0](/dotnet/docs/reference/Google.Cloud.Container.V1/2.4.0/Google.Cloud.Container.V1.MasterAuth)\n- [2.3.0](/dotnet/docs/reference/Google.Cloud.Container.V1/2.3.0/Google.Cloud.Container.V1.MasterAuth) \n\n public sealed class MasterAuth : IMessage\u003cMasterAuth\u003e, IEquatable\u003cMasterAuth\u003e, IDeepCloneable\u003cMasterAuth\u003e, IBufferMessage, IMessage\n\nReference documentation and code samples for the Google Kubernetes Engine v1 API class MasterAuth.\n\nThe authentication information for accessing the master endpoint.\nAuthentication can be done using HTTP basic auth or using client\ncertificates. \n\nInheritance\n-----------\n\n[object](https://learn.microsoft.com/dotnet/api/system.object) \\\u003e MasterAuth \n\nImplements\n----------\n\n[IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage-1.html)[MasterAuth](/dotnet/docs/reference/Google.Cloud.Container.V1/latest/Google.Cloud.Container.V1.MasterAuth), [IEquatable](https://learn.microsoft.com/dotnet/api/system.iequatable-1)[MasterAuth](/dotnet/docs/reference/Google.Cloud.Container.V1/latest/Google.Cloud.Container.V1.MasterAuth), [IDeepCloneable](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IDeepCloneable-1.html)[MasterAuth](/dotnet/docs/reference/Google.Cloud.Container.V1/latest/Google.Cloud.Container.V1.MasterAuth), [IBufferMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IBufferMessage.html), [IMessage](https://cloud.google.com/dotnet/docs/reference/Google.Protobuf/latest/Google.Protobuf.IMessage.html) \n\nInherited Members\n-----------------\n\n[object.GetHashCode()](https://learn.microsoft.com/dotnet/api/system.object.gethashcode) \n[object.GetType()](https://learn.microsoft.com/dotnet/api/system.object.gettype) \n[object.ToString()](https://learn.microsoft.com/dotnet/api/system.object.tostring)\n\nNamespace\n---------\n\n[Google.Cloud.Container.V1](/dotnet/docs/reference/Google.Cloud.Container.V1/latest/Google.Cloud.Container.V1)\n\nAssembly\n--------\n\nGoogle.Cloud.Container.V1.dll\n\nConstructors\n------------\n\n### MasterAuth()\n\n public MasterAuth()\n\n### MasterAuth(MasterAuth)\n\n public MasterAuth(MasterAuth other)\n\nProperties\n----------\n\n### ClientCertificate\n\n public string ClientCertificate { get; set; }\n\nOutput only. Base64-encoded public certificate used by clients to\nauthenticate to the cluster endpoint. Issued only if\nclient_certificate_config is set.\n\n### ClientCertificateConfig\n\n public ClientCertificateConfig ClientCertificateConfig { get; set; }\n\nConfiguration for client certificate authentication on the cluster. For\nclusters before v1.12, if no configuration is specified, a client\ncertificate is issued.\n\n### ClientKey\n\n public string ClientKey { get; set; }\n\nOutput only. Base64-encoded private key used by clients to authenticate\nto the cluster endpoint.\n\n### ClusterCaCertificate\n\n public string ClusterCaCertificate { get; set; }\n\nOutput only. Base64-encoded public certificate that is the root of\ntrust for the cluster.\n\n### Password\n\n [Obsolete]\n public string Password { get; set; }\n\nThe password to use for HTTP basic authentication to the master endpoint.\nBecause the master endpoint is open to the Internet, you should create a\nstrong password. If a password is provided for cluster creation, username\nmust be non-empty.\n\nWarning: basic authentication is deprecated, and will be removed in GKE\ncontrol plane versions 1.19 and newer. For a list of recommended\nauthentication methods, see:\n\u003chttps://cloud.google.com/kubernetes-engine/docs/how-to/api-server-authentication\u003e\n\n### Username\n\n [Obsolete]\n public string Username { get; set; }\n\nThe username to use for HTTP basic authentication to the master endpoint.\nFor clusters v1.6.0 and later, basic authentication can be disabled by\nleaving username unspecified (or setting it to the empty string).\n\nWarning: basic authentication is deprecated, and will be removed in GKE\ncontrol plane versions 1.19 and newer. For a list of recommended\nauthentication methods, see:\n\u003chttps://cloud.google.com/kubernetes-engine/docs/how-to/api-server-authentication\u003e"]]
