Interface Pipeline.Destination.AuthenticationConfig.OidcTokenOrBuilder

All Superinterfaces:
com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder
All Known Implementing Classes:
Pipeline.Destination.AuthenticationConfig.OidcToken, Pipeline.Destination.AuthenticationConfig.OidcToken.Builder
Enclosing class:
Pipeline.Destination.AuthenticationConfig

public static interface Pipeline.Destination.AuthenticationConfig.OidcTokenOrBuilder extends com.google.protobuf.MessageOrBuilder
  • Method Summary

    Modifier and Type
    Method
    Description
    Optional.
    com.google.protobuf.ByteString
    Optional.
    Required.
    com.google.protobuf.ByteString
    Required.

    Methods inherited from interface com.google.protobuf.MessageLiteOrBuilder

    isInitialized

    Methods inherited from interface com.google.protobuf.MessageOrBuilder

    findInitializationErrors, getAllFields, getDefaultInstanceForType, getDescriptorForType, getField, getInitializationErrorString, getOneofFieldDescriptor, getRepeatedField, getRepeatedFieldCount, getUnknownFields, hasField, hasOneof
  • Method Details

    • getServiceAccount

      String getServiceAccount()
       Required. Service account email used to generate the OIDC Token.
       The principal who calls this API must have
       iam.serviceAccounts.actAs permission in the service account. See
       https://cloud.google.com/iam/docs/understanding-service-accounts
       for more information. Eventarc service agents must have
       roles/roles/iam.serviceAccountTokenCreator role to allow the
       Pipeline to create OpenID tokens for authenticated requests.
       
      string service_account = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
      Returns:
      The serviceAccount.
    • getServiceAccountBytes

      com.google.protobuf.ByteString getServiceAccountBytes()
       Required. Service account email used to generate the OIDC Token.
       The principal who calls this API must have
       iam.serviceAccounts.actAs permission in the service account. See
       https://cloud.google.com/iam/docs/understanding-service-accounts
       for more information. Eventarc service agents must have
       roles/roles/iam.serviceAccountTokenCreator role to allow the
       Pipeline to create OpenID tokens for authenticated requests.
       
      string service_account = 1 [(.google.api.field_behavior) = REQUIRED, (.google.api.resource_reference) = { ... }
      Returns:
      The bytes for serviceAccount.
    • getAudience

      String getAudience()
       Optional. Audience to be used to generate the OIDC Token. The
       audience claim identifies the recipient that the JWT is intended for.
       If unspecified, the destination URI will be used.
       
      string audience = 2 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The audience.
    • getAudienceBytes

      com.google.protobuf.ByteString getAudienceBytes()
       Optional. Audience to be used to generate the OIDC Token. The
       audience claim identifies the recipient that the JWT is intended for.
       If unspecified, the destination URI will be used.
       
      string audience = 2 [(.google.api.field_behavior) = OPTIONAL];
      Returns:
      The bytes for audience.