GoogleApi.Eventarc.V1.Model.GoogleCloudEventarcV1PipelineDestinationAuthenticationConfigOidcToken (google_api_eventarc v0.18.0)

View Source

Represents a config used to authenticate with a Google OIDC token using a GCP service account. Use this authentication method to invoke your Cloud Run and Cloud Functions destinations or HTTP endpoints that support Google OIDC.

Attributes

  • audience (type: String.t, default: nil) - Optional. Audience to be used to generate the OIDC Token. The audience claim identifies the recipient that the JWT is intended for. If unspecified, the destination URI will be used.
  • serviceAccount (type: String.t, default: nil) - Required. Service account email used to generate the OIDC Token. The principal who calls this API must have iam.serviceAccounts.actAs permission in the service account. See https://cloud.google.com/iam/docs/understanding-service-accounts for more information. Eventarc service agents must have roles/roles/iam.serviceAccountTokenCreator role to allow the Pipeline to create OpenID tokens for authenticated requests.

Summary

Functions

Unwrap a decoded JSON object into its complex fields.

Types

t()

@type t() ::
  %GoogleApi.Eventarc.V1.Model.GoogleCloudEventarcV1PipelineDestinationAuthenticationConfigOidcToken{
    audience: String.t() | nil,
    serviceAccount: String.t() | nil
  }

Functions

decode(value, options)

@spec decode(struct(), keyword()) :: struct()

Unwrap a decoded JSON object into its complex fields.