Class AuthenticationSpec

    • Method Detail

      • getOidcProviders

        public List<OIDCProvider> getOidcProviders()
        oidcProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if "Type" is set to "OIDC".


        At most one provider can be configured.

      • setOidcProviders

        public void setOidcProviders​(List<OIDCProvider> oidcProviders)
        oidcProviders are OIDC identity providers that can issue tokens for this cluster Can only be set if "Type" is set to "OIDC".


        At most one provider can be configured.

      • getServiceAccountIssuer

        public String getServiceAccountIssuer()
        serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.
      • setServiceAccountIssuer

        public void setServiceAccountIssuer​(String serviceAccountIssuer)
        serviceAccountIssuer is the identifier of the bound service account token issuer. The default is https://kubernetes.default.svc WARNING: Updating this field will not result in immediate invalidation of all bound tokens with the previous issuer value. Instead, the tokens issued by previous service account issuer will continue to be trusted for a time period chosen by the platform (currently set to 24h). This time period is subject to change over time. This allows internal components to transition to use new service account issuer without service distruption.
      • getType

        public String getType()
        type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.
      • setType

        public void setType​(String type)
        type identifies the cluster managed, user facing authentication mode in use. Specifically, it manages the component that responds to login attempts. The default is IntegratedOAuth.
      • setWebhookTokenAuthenticator

        public void setWebhookTokenAuthenticator​(WebhookTokenAuthenticator webhookTokenAuthenticator)
      • setWebhookTokenAuthenticators

        public void setWebhookTokenAuthenticators​(List<DeprecatedWebhookTokenAuthenticator> webhookTokenAuthenticators)
        webhookTokenAuthenticators is DEPRECATED, setting it has no effect.
      • getAdditionalProperties

        public Map<String,​Object> getAdditionalProperties()
      • setAdditionalProperty

        public void setAdditionalProperty​(String name,
                                          Object value)
      • setAdditionalProperties

        public void setAdditionalProperties​(Map<String,​Object> additionalProperties)