Reference documentation and code samples for the Google Cloud Container V1 Client class UserManagedKeysConfig.
UserManagedKeysConfig holds the resource address to Keys which are used for signing certs and token that are used for communication within cluster.
Generated from protobuf message google.container.v1.UserManagedKeysConfig
Namespace
Google \ Cloud \ Container \ V1Methods
__construct
Constructor.
data
array
Optional. Data for populating the Message object.
↳ cluster_ca
string
The Certificate Authority Service caPool to use for the cluster CA in this cluster.
↳ etcd_api_ca
string
Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.
↳ etcd_peer_ca
string
Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.
↳ service_account_signing_keys
array
The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster. Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}
↳ service_account_verification_keys
array
The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster. Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}
↳ aggregation_ca
string
The Certificate Authority Service caPool to use for the aggregation CA in this cluster.
↳ control_plane_disk_encryption_key
string
The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.
↳ gkeops_etcd_backup_encryption_key
string
Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.
getClusterCa
The Certificate Authority Service caPool to use for the cluster CA in this cluster.
string
setClusterCa
The Certificate Authority Service caPool to use for the cluster CA in this cluster.
var
string
$this
getEtcdApiCa
Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.
string
setEtcdApiCa
Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.
var
string
$this
getEtcdPeerCa
Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.
string
setEtcdPeerCa
Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.
var
string
$this
getServiceAccountSigningKeys
The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster.
Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}
setServiceAccountSigningKeys
The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster.
Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}
var
string[]
$this
getServiceAccountVerificationKeys
The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster.
Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}
setServiceAccountVerificationKeys
The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster.
Format: projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}
var
string[]
$this
getAggregationCa
The Certificate Authority Service caPool to use for the aggregation CA in this cluster.
string
setAggregationCa
The Certificate Authority Service caPool to use for the aggregation CA in this cluster.
var
string
$this
getControlPlaneDiskEncryptionKey
The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.
string
setControlPlaneDiskEncryptionKey
The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.
var
string
$this
getGkeopsEtcdBackupEncryptionKey
Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.
string
setGkeopsEtcdBackupEncryptionKey
Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.
var
string
$this
