IAMWorkforcePoolProvider

  attributeCondition 
 : 
  
 string 
 attributeMapping 
 : 
  
 string 
 : 
  
 string 
 description 
 : 
  
 string 
 disabled 
 : 
  
 boolean 
 displayName 
 : 
  
 string 
 location 
 : 
  
 string 
 oidc 
 : 
  
 clientId 
 : 
  
 string 
  
 clientSecret 
 : 
  
 value 
 : 
  
 plainText 
 : 
  
 value 
 : 
  
 string 
  
 valueFrom 
 : 
  
 secretKeyRef 
 : 
  
 key 
 : 
  
 string 
  
 name 
 : 
  
 string 
  
 issuerUri 
 : 
  
 string 
  
 jwksJson 
 : 
  
 string 
  
 webSsoConfig 
 : 
  
 additionalScopes 
 : 
  
 - 
  
 string 
  
 assertionClaimsBehavior 
 : 
  
 string 
  
 responseType 
 : 
  
 string 
 resourceID 
 : 
  
 string 
 saml 
 : 
  
 idpMetadataXml 
 : 
  
 string 
 workforcePoolRef 
 : 
  
 external 
 : 
  
 string 
  
 name 
 : 
  
 string 
  
 namespace 
 : 
  
 string 
 

  conditions 
 : 
 - 
  
 lastTransitionTime 
 : 
  
 string 
  
 message 
 : 
  
 string 
  
 reason 
 : 
  
 string 
  
 status 
 : 
  
 string 
  
 type 
 : 
  
 string 
 observedGeneration 
 : 
  
 integer 
 oidc 
 : 
  
 clientSecret 
 : 
  
 value 
 : 
  
 thumbprint 
 : 
  
 string 
 state 
 : 
  
 string 
 

  # Copyright 2023 Google LLC 
 # 
 # Licensed under the Apache License, Version 2.0 (the "License"); 
 # you may not use this file except in compliance with the License. 
 # You may obtain a copy of the License at 
 # 
 #     http://www.apache.org/licenses/LICENSE-2.0 
 # 
 # Unless required by applicable law or agreed to in writing, software 
 # distributed under the License is distributed on an "AS IS" BASIS, 
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
 # See the License for the specific language governing permissions and 
 # limitations under the License. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMWorkforcePoolProvider 
 metadata 
 : 
  
 name 
 : 
  
 iamworkforcepoolprovider-sample-oidcworkforcepoolprovider 
 spec 
 : 
  
 location 
 : 
  
 "global" 
  
 workforcePoolRef 
 : 
  
 name 
 : 
  
 "iamworkforcepoolprovider-dep-oidcworkforcepoolprovider" 
  
 attributeMapping 
 : 
  
 google.subject 
 : 
  
 "assertion.sub" 
  
 oidc 
 : 
  
 issuerUri 
 : 
  
 "https://example.com" 
  
 clientId 
 : 
  
 "client-id" 
  
 clientSecret 
 : 
  
 value 
 : 
  
 plainText 
 : 
  
 value 
 : 
  
 "client-secret" 
  
 jwksJson 
 : 
  
 "{\"keys\":[{\"kty\":\"RSA\",\"e\":\"AQAB\",\"use\":\"sig\",\"kid\"\ 
  
 :\"1i-PmZZrF1j2rOUAxkcQaaz3MnOXcwwziuch_XWjvqI\",\"alg\":\"RS256\",\"n\":\"\ 
  
 kFpYE2Zm32y--cnUiFLm4cYmFO8tR4-5KU5-aqhRwiHPP0FkgdQZSoSyp_1DO6PruYfluRMviwOpbmM6LH7KemxVdxLKqLDkHSG0XC3dZkACRFNvBBOdFrvJ0ABXv3vVx592lFE0m-Je5-FerRSQCml6E7icNiTSxizEmvDsTIe8mvArjsODDrgWP25bEFwDPBd5cCl3_2gtW6YdaCRewLXdzuB5Wmp_vOu6trTUzEKbnQlWFtDDCPfOpywYXF8dY1Lbwas5iwwIZozwD2_CuTiyXa3T2_4oa119_rQrIC2BAv7q_S1Xoa2lk3q2GZUSVQ5i3gIbJuDHmp-6yh3k4w\"\ 
  
 }]}" 
  
 webSsoConfig 
 : 
  
 responseType 
 : 
  
 "CODE" 
  
 assertionClaimsBehavior 
 : 
  
 "MERGE_USER_INFO_OVER_ID_TOKEN_CLAIMS" 
  
 additionalScopes 
 : 
  
 - 
  
 "groups" 
  
 - 
  
 "photos" 
 --- 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMWorkforcePool 
 metadata 
 : 
  
 name 
 : 
  
 iamworkforcepoolprovider-dep-oidcworkforcepoolprovider 
 spec 
 : 
  
 organizationRef 
 : 
  
 # Replace "${ORG_ID?}" with the numeric ID for your organization. 
  
 external 
 : 
  
 "organizations/${ORG_ID?}" 
  
 location 
 : 
  
 "global" 
  
 displayName 
 : 
  
 "Display 
  
 name" 
  
 description 
 : 
  
 "A 
  
 sample 
  
 workforce 
  
 pool." 
  
 state 
 : 
  
 "ACTIVE" 
  
 disabled 
 : 
  
 false 
  
 sessionDuration 
 : 
  
 "7200s" 
 

  # Copyright 2023 Google LLC 
 # 
 # Licensed under the Apache License, Version 2.0 (the "License"); 
 # you may not use this file except in compliance with the License. 
 # You may obtain a copy of the License at 
 # 
 #     http://www.apache.org/licenses/LICENSE-2.0 
 # 
 # Unless required by applicable law or agreed to in writing, software 
 # distributed under the License is distributed on an "AS IS" BASIS, 
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
 # See the License for the specific language governing permissions and 
 # limitations under the License. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMWorkforcePoolProvider 
 metadata 
 : 
  
 name 
 : 
  
 iamworkforcepoolprovider-sample-samlworkforcepoolprovider 
 spec 
 : 
  
 location 
 : 
  
 "global" 
  
 workforcePoolRef 
 : 
  
 name 
 : 
  
 "iamworkforcepoolprovider-dep-samlworkforcepoolprovider" 
  
 displayName 
 : 
  
 "Display 
  
 name" 
  
 description 
 : 
  
 "A 
  
 sample 
  
 SAML 
  
 workforce 
  
 pool 
  
 provider." 
  
 state 
 : 
  
 "ACTIVE" 
  
 disabled 
 : 
  
 false 
  
 attributeMapping 
 : 
  
 google.subject 
 : 
  
 "assertion.sub" 
  
 attributeCondition 
 : 
  
 "true" 
  
 saml 
 : 
  
 idpMetadataXml 
 : 
  
 "<?xml 
  
 version=\"1.0\"?><md:EntityDescriptor 
  
 xmlns:md=\"urn:oasis:names:tc:SAML:2.0:metadata\"\ 
  
 \ entityID=\"https://test.com\"><md:IDPSSODescriptor 
  
 protocolSupportEnumeration=\"\ 
  
 urn:oasis:names:tc:SAML:2.0:protocol\" 
>  
< md:KeyDescriptor 
  
 use=\"signing\"><ds:KeyInfo\ 
  
 \ xmlns:ds=\"http://www.w3.org/2000/09/xmldsig#\"><ds:X509Data><ds:X509Certificate>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</ds:X509Certificate></ds:X509Data></ds:KeyInfo></md:KeyDescriptor><md:SingleSignOnService\ 
  
 \ Binding=\"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\" 
  
 Location=\"\ 
  
 https://test.com/sso\"/></md:IDPSSODescriptor></md:EntityDescriptor>" 
 --- 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMWorkforcePool 
 metadata 
 : 
  
 name 
 : 
  
 iamworkforcepoolprovider-dep-samlworkforcepoolprovider 
 spec 
 : 
  
 organizationRef 
 : 
  
 # Replace "${ORG_ID?}" with the numeric ID for your organization. 
  
 external 
 : 
  
 "organizations/${ORG_ID?}" 
  
 location 
 : 
  
 "global" 
  
 displayName 
 : 
  
 "Display 
  
 name" 
  
 description 
 : 
  
 "A 
  
 sample 
  
 workforce 
  
 pool." 
  
 state 
 : 
  
 "ACTIVE" 
  
 disabled 
 : 
  
 false 
  
 sessionDuration 
 : 
  
 "7200s"