Input only.
Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
core.String? clientSecret;