public sealed class Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken : IMessage<Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken>, IEquatable<Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken>, IDeepCloneable<Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken>, IBufferMessage, IMessageReference documentation and code samples for the Eventarc v1 API class Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken.
Represents a config used to authenticate with a Google OIDC token using a Google Cloud service account. Use this authentication method to invoke your Cloud Run and Cloud Functions destinations or HTTP endpoints that support Google OIDC.
Implements
IMessagePipelineTypesDestinationTypesAuthenticationConfigTypesOidcToken, IEquatablePipelineTypesDestinationTypesAuthenticationConfigTypesOidcToken, IDeepCloneablePipelineTypesDestinationTypesAuthenticationConfigTypesOidcToken, IBufferMessage, IMessageNamespace
Google.Cloud.Eventarc.V1Assembly
Google.Cloud.Eventarc.V1.dll
Constructors
OidcToken()
public OidcToken()OidcToken(OidcToken)
public OidcToken(Pipeline.Types.Destination.Types.AuthenticationConfig.Types.OidcToken other)| Parameter | |
|---|---|
| Name | Description |
other |
PipelineTypesDestinationTypesAuthenticationConfigTypesOidcToken |
Properties
Audience
public string Audience { get; set; }Optional. Audience to be used to generate the OIDC Token. The audience claim identifies the recipient that the JWT is intended for. If unspecified, the destination URI will be used.
| Property Value | |
|---|---|
| Type | Description |
string |
|
ServiceAccount
public string ServiceAccount { get; set; }Required. Service account email used to generate the OIDC Token. The principal who calls this API must have iam.serviceAccounts.actAs permission in the service account. See https://cloud.google.com/iam/docs/understanding-service-accounts for more information. Eventarc service agents must have roles/roles/iam.serviceAccountTokenCreator role to allow the Pipeline to create OpenID tokens for authenticated requests.
| Property Value | |
|---|---|
| Type | Description |
string |
|
ServiceAccountAsServiceAccountName
public ServiceAccountName ServiceAccountAsServiceAccountName { get; set; }ServiceAccountName-typed view over the ServiceAccount resource name property.
| Property Value | |
|---|---|
| Type | Description |
ServiceAccountName |
|