Reference documentation and code samples for the Google Anthos Multi Cloud V1 Client class AttachedOidcConfig.
OIDC discovery information of the target cluster.
Kubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster
API server. This fields indicates how Google Cloud Platform services
validate KSA tokens in order to allow system workloads (such as GKE Connect
and telemetry agents) to authenticate back to Google Cloud Platform.
Both clusters with public and private issuer URLs are supported.
Clusters with public issuers only need to specify theissuer_urlfield
while clusters with private issuers need to provide bothissuer_urlandoidc_jwks.
Generated from protobuf messagegoogle.cloud.gkemulticloud.v1.AttachedOidcConfig
Namespace
Google \ Cloud \ GkeMultiCloud \ V1
Methods
__construct
Constructor.
Parameters
Name
Description
data
array
Optional. Data for populating the Message object.
↳ issuer_url
string
A JSON Web Token (JWT) issuer URI.issuermust start withhttps://.
↳ jwks
string
Optional. OIDC verification keys in JWKS format (RFC 7517). It contains a list of OIDC verification keys that can be used to verify OIDC JWTs. This field is required for cluster that doesn't have a publicly available discovery endpoint. When provided, it will be directly used to verify the OIDC JWT asserted by the IDP.
getIssuerUrl
A JSON Web Token (JWT) issuer URI.issuermust start withhttps://.
Returns
Type
Description
string
setIssuerUrl
A JSON Web Token (JWT) issuer URI.issuermust start withhttps://.
Parameter
Name
Description
var
string
Returns
Type
Description
$this
getJwks
Optional. OIDC verification keys in JWKS format (RFC 7517).
It contains a list of OIDC verification keys that can be used to verify
OIDC JWTs.
This field is required for cluster that doesn't have a publicly available
discovery endpoint. When provided, it will be directly used
to verify the OIDC JWT asserted by the IDP.
Returns
Type
Description
string
setJwks
Optional. OIDC verification keys in JWKS format (RFC 7517).
It contains a list of OIDC verification keys that can be used to verify
OIDC JWTs.
This field is required for cluster that doesn't have a publicly available
discovery endpoint. When provided, it will be directly used
to verify the OIDC JWT asserted by the IDP.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[],[],null,["# Google Anthos Multi Cloud V1 Client - Class AttachedOidcConfig (1.2.2)\n\nVersion latestkeyboard_arrow_down\n\n- [1.2.2 (latest)](/php/docs/reference/cloud-gke-multi-cloud/latest/V1.AttachedOidcConfig)\n- [1.2.1](/php/docs/reference/cloud-gke-multi-cloud/1.2.1/V1.AttachedOidcConfig)\n- [1.1.2](/php/docs/reference/cloud-gke-multi-cloud/1.1.2/V1.AttachedOidcConfig)\n- [1.0.0](/php/docs/reference/cloud-gke-multi-cloud/1.0.0/V1.AttachedOidcConfig)\n- [0.6.1](/php/docs/reference/cloud-gke-multi-cloud/0.6.1/V1.AttachedOidcConfig)\n- [0.5.4](/php/docs/reference/cloud-gke-multi-cloud/0.5.4/V1.AttachedOidcConfig)\n- [0.4.4](/php/docs/reference/cloud-gke-multi-cloud/0.4.4/V1.AttachedOidcConfig)\n- [0.3.0](/php/docs/reference/cloud-gke-multi-cloud/0.3.0/V1.AttachedOidcConfig)\n- [0.2.3](/php/docs/reference/cloud-gke-multi-cloud/0.2.3/V1.AttachedOidcConfig)\n- [0.1.4](/php/docs/reference/cloud-gke-multi-cloud/0.1.4/V1.AttachedOidcConfig) \nReference documentation and code samples for the Google Anthos Multi Cloud V1 Client class AttachedOidcConfig.\n\nOIDC discovery information of the target cluster.\n\nKubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster\nAPI server. This fields indicates how Google Cloud Platform services\nvalidate KSA tokens in order to allow system workloads (such as GKE Connect\nand telemetry agents) to authenticate back to Google Cloud Platform.\nBoth clusters with public and private issuer URLs are supported.\nClusters with public issuers only need to specify the `issuer_url` field\nwhile clusters with private issuers need to provide both\n`issuer_url` and `oidc_jwks`.\n\nGenerated from protobuf message `google.cloud.gkemulticloud.v1.AttachedOidcConfig`\n\nNamespace\n---------\n\nGoogle \\\\ Cloud \\\\ GkeMultiCloud \\\\ V1\n\nMethods\n-------\n\n### __construct\n\nConstructor.\n\n### getIssuerUrl\n\nA JSON Web Token (JWT) issuer URI. `issuer` must start with `https://`.\n\n### setIssuerUrl\n\nA JSON Web Token (JWT) issuer URI. `issuer` must start with `https://`.\n\n### getJwks\n\nOptional. OIDC verification keys in JWKS format (RFC 7517).\n\nIt contains a list of OIDC verification keys that can be used to verify\nOIDC JWTs.\nThis field is required for cluster that doesn't have a publicly available\ndiscovery endpoint. When provided, it will be directly used\nto verify the OIDC JWT asserted by the IDP.\n\n### setJwks\n\nOptional. OIDC verification keys in JWKS format (RFC 7517).\n\nIt contains a list of OIDC verification keys that can be used to verify\nOIDC JWTs.\nThis field is required for cluster that doesn't have a publicly available\ndiscovery endpoint. When provided, it will be directly used\nto verify the OIDC JWT asserted by the IDP."]]
