Reference documentation and code samples for the Google Cloud Container V1 Client class UserManagedKeysConfig.
UserManagedKeysConfig holds the resource address to Keys which are used
for signing certs and token that are used for communication within cluster.
Generated from protobuf messagegoogle.container.v1.UserManagedKeysConfig
Namespace
Google \ Cloud \ Container \ V1
Methods
__construct
Constructor.
Parameters
Name
Description
data
array
Optional. Data for populating the Message object.
↳ cluster_ca
string
The Certificate Authority Service caPool to use for the cluster CA in this cluster.
↳ etcd_api_ca
string
Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.
↳ etcd_peer_ca
string
Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.
↳ service_account_signing_keys
array
The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster. Format:projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}
↳ service_account_verification_keys
array
The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster. Format:projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}
↳ aggregation_ca
string
The Certificate Authority Service caPool to use for the aggregation CA in this cluster.
↳ control_plane_disk_encryption_key
string
The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.
↳ gkeops_etcd_backup_encryption_key
string
Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.
getClusterCa
The Certificate Authority Service caPool to use for the cluster CA in this
cluster.
Returns
Type
Description
string
setClusterCa
The Certificate Authority Service caPool to use for the cluster CA in this
cluster.
Parameter
Name
Description
var
string
Returns
Type
Description
$this
getEtcdApiCa
Resource path of the Certificate Authority Service caPool to use for the
etcd API CA in this cluster.
Returns
Type
Description
string
setEtcdApiCa
Resource path of the Certificate Authority Service caPool to use for the
etcd API CA in this cluster.
Parameter
Name
Description
var
string
Returns
Type
Description
$this
getEtcdPeerCa
Resource path of the Certificate Authority Service caPool to use for the
etcd peer CA in this cluster.
Returns
Type
Description
string
setEtcdPeerCa
Resource path of the Certificate Authority Service caPool to use for the
etcd peer CA in this cluster.
Parameter
Name
Description
var
string
Returns
Type
Description
$this
getServiceAccountSigningKeys
The Cloud KMS cryptoKeyVersions to use for signing service account JWTs
issued by this cluster.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Google Cloud Container V1 Client - Class UserManagedKeysConfig (2.5.0)\n\nVersion latestkeyboard_arrow_down\n\n- [2.5.0 (latest)](/php/docs/reference/cloud-container/latest/V1.UserManagedKeysConfig)\n- [2.4.0](/php/docs/reference/cloud-container/2.4.0/V1.UserManagedKeysConfig)\n- [2.3.4](/php/docs/reference/cloud-container/2.3.4/V1.UserManagedKeysConfig)\n- [2.2.1](/php/docs/reference/cloud-container/2.2.1/V1.UserManagedKeysConfig)\n- [2.1.0](/php/docs/reference/cloud-container/2.1.0/V1.UserManagedKeysConfig)\n- [2.0.0](/php/docs/reference/cloud-container/2.0.0/V1.UserManagedKeysConfig)\n- [1.33.0](/php/docs/reference/cloud-container/1.33.0/V1.UserManagedKeysConfig)\n- [1.32.0](/php/docs/reference/cloud-container/1.32.0/V1.UserManagedKeysConfig)\n- [1.31.0](/php/docs/reference/cloud-container/1.31.0/V1.UserManagedKeysConfig)\n- [1.30.3](/php/docs/reference/cloud-container/1.30.3/V1.UserManagedKeysConfig)\n- [1.24.0](/php/docs/reference/cloud-container/1.24.0/V1.UserManagedKeysConfig)\n- [1.23.0](/php/docs/reference/cloud-container/1.23.0/V1.UserManagedKeysConfig)\n- [1.22.0](/php/docs/reference/cloud-container/1.22.0/V1.UserManagedKeysConfig)\n- [1.21.1](/php/docs/reference/cloud-container/1.21.1/V1.UserManagedKeysConfig)\n- [1.20.0](/php/docs/reference/cloud-container/1.20.0/V1.UserManagedKeysConfig)\n- [1.19.0](/php/docs/reference/cloud-container/1.19.0/V1.UserManagedKeysConfig)\n- [1.18.0](/php/docs/reference/cloud-container/1.18.0/V1.UserManagedKeysConfig)\n- [1.17.1](/php/docs/reference/cloud-container/1.17.1/V1.UserManagedKeysConfig)\n- [1.16.0](/php/docs/reference/cloud-container/1.16.0/V1.UserManagedKeysConfig)\n- [1.15.0](/php/docs/reference/cloud-container/1.15.0/V1.UserManagedKeysConfig)\n- [1.14.0](/php/docs/reference/cloud-container/1.14.0/V1.UserManagedKeysConfig)\n- [1.13.1](/php/docs/reference/cloud-container/1.13.1/V1.UserManagedKeysConfig)\n- [1.12.1](/php/docs/reference/cloud-container/1.12.1/V1.UserManagedKeysConfig)\n- [1.10.3](/php/docs/reference/cloud-container/1.10.3/V1.UserManagedKeysConfig)\n- [1.9.1](/php/docs/reference/cloud-container/1.9.1/V1.UserManagedKeysConfig) \nReference documentation and code samples for the Google Cloud Container V1 Client class UserManagedKeysConfig.\n\nUserManagedKeysConfig holds the resource address to Keys which are used\nfor signing certs and token that are used for communication within cluster.\n\nGenerated from protobuf message `google.container.v1.UserManagedKeysConfig`\n\nNamespace\n---------\n\nGoogle \\\\ Cloud \\\\ Container \\\\ V1\n\nMethods\n-------\n\n### __construct\n\nConstructor.\n\n### getClusterCa\n\nThe Certificate Authority Service caPool to use for the cluster CA in this\ncluster.\n\n### setClusterCa\n\nThe Certificate Authority Service caPool to use for the cluster CA in this\ncluster.\n\n### getEtcdApiCa\n\nResource path of the Certificate Authority Service caPool to use for the\netcd API CA in this cluster.\n\n### setEtcdApiCa\n\nResource path of the Certificate Authority Service caPool to use for the\netcd API CA in this cluster.\n\n### getEtcdPeerCa\n\nResource path of the Certificate Authority Service caPool to use for the\netcd peer CA in this cluster.\n\n### setEtcdPeerCa\n\nResource path of the Certificate Authority Service caPool to use for the\netcd peer CA in this cluster.\n\n### getServiceAccountSigningKeys\n\nThe Cloud KMS cryptoKeyVersions to use for signing service account JWTs\nissued by this cluster.\n\nFormat:\n`projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}`\n\n### setServiceAccountSigningKeys\n\nThe Cloud KMS cryptoKeyVersions to use for signing service account JWTs\nissued by this cluster.\n\nFormat:\n`projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}`\n\n### getServiceAccountVerificationKeys\n\nThe Cloud KMS cryptoKeyVersions to use for verifying service account JWTs\nissued by this cluster.\n\nFormat:\n`projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}`\n\n### setServiceAccountVerificationKeys\n\nThe Cloud KMS cryptoKeyVersions to use for verifying service account JWTs\nissued by this cluster.\n\nFormat:\n`projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryptoKeyVersions/{cryptoKeyVersion}`\n\n### getAggregationCa\n\nThe Certificate Authority Service caPool to use for the aggregation CA in\nthis cluster.\n\n### setAggregationCa\n\nThe Certificate Authority Service caPool to use for the aggregation CA in\nthis cluster.\n\n### getControlPlaneDiskEncryptionKey\n\nThe Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control\nplane nodes.\n\n### setControlPlaneDiskEncryptionKey\n\nThe Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control\nplane nodes.\n\n### getGkeopsEtcdBackupEncryptionKey\n\nResource path of the Cloud KMS cryptoKey to use for encryption of internal\netcd backups.\n\n### setGkeopsEtcdBackupEncryptionKey\n\nResource path of the Cloud KMS cryptoKey to use for encryption of internal\netcd backups."]]
