Struct scaleway_api_rs::models::_k8s_v1_regions__region__clusters_open_id_connect_config::K8sV1RegionsRegionClustersOpenIdConnectConfig

pub struct K8sV1RegionsRegionClustersOpenIdConnectConfig {
    pub issuer_url: Option<String>,
    pub client_id: Option<String>,
    pub username_claim: Option<String>,
    pub username_prefix: Option<String>,
    pub groups_claim: Option<Vec<String>>,
    pub groups_prefix: Option<String>,
    pub required_claim: Option<Vec<String>>,
}

K8sV1RegionsRegionClustersOpenIdConnectConfig : This feature is in ALPHA state, it may be deleted or modified. This configuration enables to set the OpenID Connect configuration of the Kubernetes API server.

Fields

issuer_url: Option<String>

URL of the provider which allows the API server to discover public signing keys. Only URLs which use the https:// scheme are accepted. This is typically the provider’s discovery URL without a path, for example "https://accounts.google.com" or "https://login.salesforce.com". This URL should point to the level below .well-known/openid-configuration.

client_id: Option<String>

A client id that all tokens must be issued for

username_claim: Option<String>

JWT claim to use as the user name. By default sub, which is expected to be a unique identifier of the end user. Admins can choose other claims, such as email or name, depending on their provider. However, claims other than email will be prefixed with the issuer URL to prevent naming clashes with other plugins.

username_prefix: Option<String>

Prefix prepended to username claims to prevent clashes with existing names (such as system: users). For example, the value oidc: will create usernames like oidc:jane.doe. If this flag isn’t provided and username_claim is a value other than email the prefix defaults to ( Issuer URL )# where ( Issuer URL ) is the value of issuer_url. The value - can be used to disable all prefixing.

groups_claim: Option<Vec<String>>

JWT claim to use as the user’s group

groups_prefix: Option<String>

Prefix prepended to group claims to prevent clashes with existing names (such as system: groups). For example, the value oidc: will create group names like oidc:engineering and oidc:infra.

required_claim: Option<Vec<String>>

Multiple key=value pairs that describes a required claim in the ID Token. If set, the claims are verified to be present in the ID Token with a matching value.

Implementations

impl K8sV1RegionsRegionClustersOpenIdConnectConfig

pub fn new() -> K8sV1RegionsRegionClustersOpenIdConnectConfig

This feature is in ALPHA state, it may be deleted or modified. This configuration enables to set the OpenID Connect configuration of the Kubernetes API server.

Trait Implementations

impl Clone for K8sV1RegionsRegionClustersOpenIdConnectConfig

fn clone(&self) -> K8sV1RegionsRegionClustersOpenIdConnectConfig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for K8sV1RegionsRegionClustersOpenIdConnectConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for K8sV1RegionsRegionClustersOpenIdConnectConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl PartialEq<K8sV1RegionsRegionClustersOpenIdConnectConfig> for K8sV1RegionsRegionClustersOpenIdConnectConfig

fn eq(&self, other: &K8sV1RegionsRegionClustersOpenIdConnectConfig) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &K8sV1RegionsRegionClustersOpenIdConnectConfig) -> bool

This method tests for !=.

impl Serialize for K8sV1RegionsRegionClustersOpenIdConnectConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for K8sV1RegionsRegionClustersOpenIdConnectConfig