com.google.api.services.container.model

Class UserManagedKeysConfig

java.lang.Object

java.util.AbstractMap<String,Object>

com.google.api.client.util.GenericData

com.google.api.client.json.GenericJson

com.google.api.services.container.model.UserManagedKeysConfig

All Implemented Interfaces:

Cloneable, Map<String,Object>

public final class UserManagedKeysConfig
extends com.google.api.client.json.GenericJson

UserManagedKeysConfig holds the resource address to Keys which are used for signing certs and token that are used for communication within cluster.

This is the Java data model class that specifies how to parse/serialize into the JSON that is transmitted over HTTP when working with the Kubernetes Engine API. For a detailed explanation see: https://developers.google.com/api-client-library/java/google-http-java-client/json

Author:

Google, Inc.

Nested Class Summary

Nested classes/interfaces inherited from class com.google.api.client.util.GenericData

com.google.api.client.util.GenericData.Flags

Nested classes/interfaces inherited from class java.util.AbstractMap

AbstractMap.SimpleEntry<K,V>, AbstractMap.SimpleImmutableEntry<K,V>

Nested classes/interfaces inherited from interface java.util.Map

Map.Entry<K,V>

Constructor Summary

Constructors

Constructor and Description
UserManagedKeysConfig()

Method Summary

Modifier and Type	Method and Description
UserManagedKeysConfig	clone()
String	getAggregationCa() The Certificate Authority Service caPool to use for the aggregation CA in this cluster.
String	getClusterCa() The Certificate Authority Service caPool to use for the cluster CA in this cluster.
String	getControlPlaneDiskEncryptionKey() The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.
String	getEtcdApiCa() Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.
String	getEtcdPeerCa() Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.
String	getGkeopsEtcdBackupEncryptionKey() Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.
List<String>	getServiceAccountSigningKeys() The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster.
List<String>	getServiceAccountVerificationKeys() The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster.
UserManagedKeysConfig	set(String fieldName, Object value)
UserManagedKeysConfig	setAggregationCa(String aggregationCa) The Certificate Authority Service caPool to use for the aggregation CA in this cluster.
UserManagedKeysConfig	setClusterCa(String clusterCa) The Certificate Authority Service caPool to use for the cluster CA in this cluster.
UserManagedKeysConfig	setControlPlaneDiskEncryptionKey(String controlPlaneDiskEncryptionKey) The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.
UserManagedKeysConfig	setEtcdApiCa(String etcdApiCa) Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.
UserManagedKeysConfig	setEtcdPeerCa(String etcdPeerCa) Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.
UserManagedKeysConfig	setGkeopsEtcdBackupEncryptionKey(String gkeopsEtcdBackupEncryptionKey) Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.
UserManagedKeysConfig	setServiceAccountSigningKeys(List<String> serviceAccountSigningKeys) The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster.
UserManagedKeysConfig	setServiceAccountVerificationKeys(List<String> serviceAccountVerificationKeys) The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster.

Methods inherited from class com.google.api.client.json.GenericJson

getFactory, setFactory, toPrettyString, toString

Methods inherited from class com.google.api.client.util.GenericData

entrySet, equals, get, getClassInfo, getUnknownKeys, hashCode, put, putAll, remove, setUnknownKeys

Methods inherited from class java.util.AbstractMap

clear, containsKey, containsValue, isEmpty, keySet, size, values

Methods inherited from class java.lang.Object

finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface java.util.Map

compute, computeIfAbsent, computeIfPresent, forEach, getOrDefault, merge, putIfAbsent, remove, replace, replace, replaceAll

Constructor Detail

UserManagedKeysConfig

public UserManagedKeysConfig()

Method Detail

getAggregationCa

public String getAggregationCa()

The Certificate Authority Service caPool to use for the aggregation CA in this cluster.

Returns:

value or null for none

setAggregationCa

public UserManagedKeysConfig setAggregationCa(String aggregationCa)

The Certificate Authority Service caPool to use for the aggregation CA in this cluster.

Parameters:

aggregationCa - aggregationCa or null for none

getClusterCa

public String getClusterCa()

The Certificate Authority Service caPool to use for the cluster CA in this cluster.

Returns:

value or null for none

setClusterCa

public UserManagedKeysConfig setClusterCa(String clusterCa)

The Certificate Authority Service caPool to use for the cluster CA in this cluster.

Parameters:

clusterCa - clusterCa or null for none

getControlPlaneDiskEncryptionKey

public String getControlPlaneDiskEncryptionKey()

The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.

Returns:

value or null for none

setControlPlaneDiskEncryptionKey

public UserManagedKeysConfig setControlPlaneDiskEncryptionKey(String controlPlaneDiskEncryptionKey)

The Cloud KMS cryptoKey to use for Confidential Hyperdisk on the control plane nodes.

Parameters:

controlPlaneDiskEncryptionKey - controlPlaneDiskEncryptionKey or null for none

getEtcdApiCa

public String getEtcdApiCa()

Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.

Returns:

value or null for none

setEtcdApiCa

public UserManagedKeysConfig setEtcdApiCa(String etcdApiCa)

Resource path of the Certificate Authority Service caPool to use for the etcd API CA in this cluster.

Parameters:

etcdApiCa - etcdApiCa or null for none

getEtcdPeerCa

public String getEtcdPeerCa()

Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.

Returns:

value or null for none

setEtcdPeerCa

public UserManagedKeysConfig setEtcdPeerCa(String etcdPeerCa)

Resource path of the Certificate Authority Service caPool to use for the etcd peer CA in this cluster.

Parameters:

etcdPeerCa - etcdPeerCa or null for none

getGkeopsEtcdBackupEncryptionKey

public String getGkeopsEtcdBackupEncryptionKey()

Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.

Returns:

value or null for none

setGkeopsEtcdBackupEncryptionKey

public UserManagedKeysConfig setGkeopsEtcdBackupEncryptionKey(String gkeopsEtcdBackupEncryptionKey)

Resource path of the Cloud KMS cryptoKey to use for encryption of internal etcd backups.

Parameters:

gkeopsEtcdBackupEncryptionKey - gkeopsEtcdBackupEncryptionKey or null for none

getServiceAccountSigningKeys

public List<String> getServiceAccountSigningKeys()

The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster. Format: `projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryp toKeyVersions/{cryptoKeyVersion}`

Returns:

value or null for none

setServiceAccountSigningKeys

public UserManagedKeysConfig setServiceAccountSigningKeys(List<String> serviceAccountSigningKeys)

The Cloud KMS cryptoKeyVersions to use for signing service account JWTs issued by this cluster. Format: `projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{cryptoKey}/cryp toKeyVersions/{cryptoKeyVersion}`

Parameters:

serviceAccountSigningKeys - serviceAccountSigningKeys or null for none

getServiceAccountVerificationKeys

public List<String> getServiceAccountVerificationKeys()

The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster. Format: `projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{crypto Key}/cryptoKeyVersions/{cryptoKeyVersion}`

Returns:

value or null for none

setServiceAccountVerificationKeys

public UserManagedKeysConfig setServiceAccountVerificationKeys(List<String> serviceAccountVerificationKeys)

The Cloud KMS cryptoKeyVersions to use for verifying service account JWTs issued by this cluster. Format: `projects/{project}/locations/{location}/keyRings/{keyring}/cryptoKeys/{crypto Key}/cryptoKeyVersions/{cryptoKeyVersion}`

Parameters:

serviceAccountVerificationKeys - serviceAccountVerificationKeys or null for none

set

public UserManagedKeysConfig set(String fieldName,
                                 Object value)

Overrides:

set in class com.google.api.client.json.GenericJson

clone

public UserManagedKeysConfig clone()

Overrides:

clone in class com.google.api.client.json.GenericJson